@kestra-io/ui-libs
<p align="center"> <a href="https://www.kestra.io"> <img width="460" src="https://kestra.io/logo.svg" alt="Kestra workflow orchestrator" /> </a> </p>
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/VueFlowUtils-BkJ3LZKs.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; source maps included; content is normal vue-flow utility code. | ai | |
| source-diff | obfuscated-file:dist/FlowYamlUtils-iwOU9gyM.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; source maps included; content is normal utility code. | ai | |
| source-diff | obfuscated-file:dist/FlowYamlUtils-CAwjZu0s.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle output; not obfuscation, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-CLCIuGav.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle output; not obfuscation, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-BjgsYtwb.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle with accompanying source map; expected build artifact for this UI library. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-DKyfR_Hf.cjs | AI (source-diff): Standard Vite/Rollup minified CJS output; not obfuscated, readable code with known deps. | ai | |
| source-diff | obfuscated-file:dist/FlowYamlUtils-BR3BpHdP.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; source maps included; code content is benign lodash/yaml utilities. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-CAqlzP8f.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; source maps included; code content is benign vue-flow utilities. | ai | |
| phantom-deps | phantom-dep:vue-i18n | AI (phantom-deps): vue-i18n is a declared runtime dependency; phantom-dep false positive for this package. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions publisher is confirmed legitimate by SLSA provenance attestation; stable for this package going forward. | ai | |
| source-diff | obfuscated-file:dist/VueFlowUtils-CscPDexP.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; not obfuscated malware. Stable pattern for this UI library. | ai | |
| phantom-deps | phantom-dep:mermaid | AI (phantom-deps): mermaid is a declared runtime dependency; phantom-dep heuristic false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/kestra-index.mjs | AI (source-diff): Standard Vite/Rollup minified ESM bundle output; not obfuscated malware. Stable pattern for this UI library. | ai | |
| source-diff | obfuscated-file:dist/kestra-index.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; not obfuscated malware. Stable pattern for this UI library. | ai |
Versions (showing 73 of 73)
| Version | Deps | Published |
|---|---|---|
| 0.0.302 | 4 / 30 | |
| 0.0.301 | 4 / 30 | |
| 0.0.300 | 4 / 30 | |
| 0.0.299 | 4 / 30 | |
| 0.0.294 | 4 / 30 | |
| 0.0.293 | 4 / 30 | |
| 0.0.292 | 4 / 30 | |
| 0.0.291 | 4 / 30 | |
| 0.0.290 | 7 / 26 | |
| 0.0.289 | 7 / 26 | |
| 0.0.288 | 7 / 26 | |
| 0.0.287 | 7 / 26 | |
| 0.0.286 | 7 / 26 | |
| 0.0.285 | 7 / 26 | |
| 0.0.284 | 7 / 26 | |
| 0.0.283 | 7 / 26 | |
| 0.0.282 | 7 / 26 | |
| 0.0.281 | 7 / 26 | |
| 0.0.280 | 7 / 25 | |
| 0.0.279 | 7 / 25 | |
| 0.0.278 | 7 / 25 | |
| 0.0.277 | 7 / 25 | |
| 0.0.276 | 7 / 25 | |
| 0.0.275 | 7 / 25 | |
| 0.0.274 | 7 / 25 | |
| 0.0.273 | 7 / 25 | |
| 0.0.272 | 7 / 25 | |
| 0.0.271 | 7 / 25 | |
| 0.0.270 | 7 / 25 | |
| 0.0.269 | 7 / 25 | |
| 0.0.268 | 7 / 25 | |
| 0.0.266 | 7 / 25 | |
| 0.0.265 | 7 / 25 | |
| 0.0.264 | 7 / 25 | |
| 0.0.263 | 7 / 25 | |
| 0.0.262 | 7 / 25 | |
| 0.0.261 | 7 / 25 | |
| 0.0.260 | 7 / 25 | |
| 0.0.259 | 7 / 25 | |
| 0.0.258 | 7 / 25 | |
| 0.0.257 | 7 / 25 | |
| 0.0.79 | 4 / 8 | |
| 0.0.75 | 4 / 8 | |
| 0.0.74 | 4 / 8 | |
| 0.0.73 | 4 / 8 | |
| 0.0.72 | 4 / 8 | |
| 0.0.71 | 4 / 8 | |
| 0.0.70 | 4 / 8 | |
| 0.0.69 | 4 / 8 | |
| 0.0.68 | 4 / 8 | |
| 0.0.67 | 4 / 8 | |
| 0.0.66 | 4 / 8 | |
| 0.0.65 | 4 / 8 | |
| 0.0.64 | 4 / 8 | |
| 0.0.63 | 4 / 8 | |
| 0.0.62 | 3 / 9 | |
| 0.0.61 | 2 / 10 | |
| 0.0.60 | 2 / 10 | |
| 0.0.59 | 0 / 8 | |
| 0.0.58 | 0 / 8 | |
| 0.0.57 | 0 / 8 | |
| 0.0.56 | 0 / 8 | |
| 0.0.55 | 0 / 8 | |
| 0.0.54 | 0 / 8 | |
| 0.0.53 | 0 / 8 | |
| 0.0.52 | 1 / 7 | |
| 0.0.51 | 0 / 8 | |
| 0.0.50 | 0 / 8 | |
| 0.0.49 | 0 / 8 | |
| 0.0.48 | 0 / 8 | |
| 0.0.47 | 0 / 7 | |
| 0.0.46 | 0 / 7 | |
| 0.0.45 | 0 / 7 |
v0.0.79
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.75
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.74
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.73
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.72
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.71
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.70
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.69
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.68
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.67
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.66
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.65
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.64
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.63
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.62
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.61
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.60
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.59
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.58
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.57
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.56
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.55
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.54
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.53
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.52
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.51
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.50
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.49
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.48
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.47
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.46
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.0.45
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.