@kne/react-form
react-form 是一个轻量级且功能强大的 React 表单库，专为现代化应用设计，提供了简洁的 API 和完整的表单管理解决方案。
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:react-dom | AI (typosquat): Scoped @kne/react-form is a legitimate React form library, not a typosquat of react-dom; Levenshtein match is coincidental. | ai | |
| dependencies | unvetted-dep:@kne/use-event | AI (dependencies): @kne/use-event is part of the same @kne org ecosystem used consistently across this package's dependencies. | ai |
Versions (showing 7 of 7)
| Version | Deps | Published |
|---|---|---|
| 3.1.9 | 6 / 8 | |
| 3.1.8 | 6 / 8 | |
| 3.1.6 | 6 / 8 | |
| 3.1.5 | 5 / 8 | |
| 3.1.4 | 5 / 8 | |
| 3.1.3 | 5 / 8 | |
| 3.1.2 | 5 / 8 |
v3.1.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.1.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.1.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.1.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.1.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.1.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.