@kestra-io/ui-libs
<p align="center"> <a href="https://www.kestra.io"> <img width="460" src="https://kestra.io/logo.svg" alt="Kestra workflow orchestrator" /> </a> </p>
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/VueFlowUtils-BkJ3LZKs.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; source maps included; content is normal vue-flow utility code. | ai | |
| source-diff | obfuscated-file:dist/FlowYamlUtils-iwOU9gyM.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; source maps included; content is normal utility code. | ai | |
| source-diff | obfuscated-file:dist/FlowYamlUtils-CAwjZu0s.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle output; not obfuscation, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-CLCIuGav.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle output; not obfuscation, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-BjgsYtwb.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle with accompanying source map; expected build artifact for this UI library. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-DKyfR_Hf.cjs | AI (source-diff): Standard Vite/Rollup minified CJS output; not obfuscated, readable code with known deps. | ai | |
| source-diff | obfuscated-file:dist/FlowYamlUtils-BR3BpHdP.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; source maps included; code content is benign lodash/yaml utilities. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-CAqlzP8f.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; source maps included; code content is benign vue-flow utilities. | ai | |
| phantom-deps | phantom-dep:vue-i18n | AI (phantom-deps): vue-i18n is a declared runtime dependency; phantom-dep false positive for this package. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions publisher is confirmed legitimate by SLSA provenance attestation; stable for this package going forward. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-CscPDexP.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; not obfuscated malware. Stable pattern for this UI library. | ai | |
| phantom-deps | phantom-dep:mermaid | AI (phantom-deps): mermaid is a declared runtime dependency; phantom-dep heuristic false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/kestra-index.mjs | AI (source-diff): Standard Vite/Rollup minified ESM bundle output; not obfuscated malware. Stable pattern for this UI library. | ai | |
| source-diff | obfuscated-file:dist/kestra-index.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; not obfuscated malware. Stable pattern for this UI library. | ai |
Versions (showing 51 of 73)
| Version | Deps | Published |
|---|---|---|
| 0.0.302 | 4 / 30 | |
| 0.0.301 | 4 / 30 | |
| 0.0.300 | 4 / 30 | |
| 0.0.299 | 4 / 30 | |
| 0.0.294 | 4 / 30 | |
| 0.0.293 | 4 / 30 | |
| 0.0.292 | 4 / 30 | |
| 0.0.291 | 4 / 30 | |
| 0.0.290 | 7 / 26 | |
| 0.0.289 | 7 / 26 | |
| 0.0.288 | 7 / 26 | |
| 0.0.287 | 7 / 26 | |
| 0.0.286 | 7 / 26 | |
| 0.0.285 | 7 / 26 | |
| 0.0.284 | 7 / 26 | |
| 0.0.283 | 7 / 26 | |
| 0.0.282 | 7 / 26 | |
| 0.0.281 | 7 / 26 | |
| 0.0.280 | 7 / 25 | |
| 0.0.279 | 7 / 25 | |
| 0.0.278 | 7 / 25 | |
| 0.0.277 | 7 / 25 | |
| 0.0.276 | 7 / 25 | |
| 0.0.275 | 7 / 25 | |
| 0.0.274 | 7 / 25 | |
| 0.0.273 | 7 / 25 | |
| 0.0.272 | 7 / 25 | |
| 0.0.271 | 7 / 25 | |
| 0.0.270 | 7 / 25 | |
| 0.0.269 | 7 / 25 | |
| 0.0.268 | 7 / 25 | |
| 0.0.266 | 7 / 25 | |
| 0.0.265 | 7 / 25 | |
| 0.0.264 | 7 / 25 | |
| 0.0.263 | 7 / 25 | |
| 0.0.262 | 7 / 25 | |
| 0.0.261 | 7 / 25 | |
| 0.0.260 | 7 / 25 | |
| 0.0.259 | 7 / 25 | |
| 0.0.258 | 7 / 25 | |
| 0.0.257 | 7 / 25 | |
| 0.0.79 | 4 / 8 | |
| 0.0.75 | 4 / 8 | |
| 0.0.74 | 4 / 8 | |
| 0.0.73 | 4 / 8 | |
| 0.0.72 | 4 / 8 | |
| 0.0.71 | 4 / 8 | |
| 0.0.70 | 4 / 8 | |
| 0.0.69 | 4 / 8 | |
| 0.0.68 | 4 / 8 | |
| 0.0.67 | 4 / 8 |
v0.0.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.75
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.74
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.73
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.72
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.71
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.70
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.69
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.68
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.67
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.