← Home

@launchpad-ui/drawer

A partial overlay that appears from the right side of the screen.

11
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

launchdarkly

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@launchpad-ui/progress AI (dependencies): Same org scope (@launchpad-ui); consistent with the rest of the package's sibling dependencies. ai
phantom-deps phantom-dep:framer-motion AI (phantom-deps): Referenced in config/build files; stable false positive for this UI component package. ai
phantom-deps phantom-dep:@launchpad-ui/icons AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic is a stable false positive here. ai
phantom-deps phantom-dep:@launchpad-ui/button AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic is a stable false positive here. ai
phantom-deps phantom-dep:classix AI (phantom-deps): Referenced in config/build files; stable false positive for this UI component package. ai
phantom-deps phantom-dep:@launchpad-ui/tokens AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic is a stable false positive here. ai
phantom-deps phantom-dep:@launchpad-ui/progress AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic is a stable false positive here. ai
phantom-deps phantom-dep:@launchpad-ui/focus-trap AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic is a stable false positive here. ai
phantom-deps phantom-dep:@launchpad-ui/portal AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic is a stable false positive here. ai

Versions (showing 11 of 11)

Version Deps Published
0.9.14 8 / 4
0.9.13 8 / 4
0.9.12 8 / 4
0.9.11 8 / 4
0.9.9 8 / 4
0.9.7 8 / 4
0.9.3 8 / 4
0.9.1 8 / 4
0.6.2 8 / 4
0.5.79 10 / 2
0.5.78 10 / 2

v0.9.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.79

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.78

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.