@loafmarkets/ui
Loaf Markets enterprise component library
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped org package @loafmarkets/ui; not a typosquat of uuid. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped org package @loafmarkets/ui; not a typosquat of pg. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped org package @loafmarkets/ui; not a typosquat of qs. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped org package @loafmarkets/ui; not a typosquat of joi. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped org package @loafmarkets/ui; not a typosquat of yup. | ai | |
| phantom-deps | phantom-dep:@loafmarkets/tokens | AI (phantom-deps): Same-org dep; likely used indirectly via tailwind/token config pipeline. | ai | |
| phantom-deps | phantom-dep:@loafmarkets/tailwind-config | AI (phantom-deps): Same-org dep; referenced via tailwind.config.ts export, not direct import. | ai |
Versions (showing 51 of 393)
| Version | Deps | Published |
|---|---|---|
| 0.1.406 | 14 / 9 | |
| 0.1.405 | 14 / 9 | |
| 0.1.404 | 14 / 9 | |
| 0.1.403 | 14 / 9 | |
| 0.1.402 | 14 / 9 | |
| 0.1.401 | 14 / 9 | |
| 0.1.400 | 14 / 9 | |
| 0.1.399 | 14 / 9 | |
| 0.1.398 | 14 / 9 | |
| 0.1.397 | 14 / 9 | |
| 0.1.396 | 14 / 9 | |
| 0.1.395 | 14 / 9 | |
| 0.1.394 | 14 / 9 | |
| 0.1.393 | 14 / 9 | |
| 0.1.392 | 14 / 9 | |
| 0.1.391 | 14 / 9 | |
| 0.1.390 | 14 / 9 | |
| 0.1.389 | 14 / 9 | |
| 0.1.388 | 14 / 9 | |
| 0.1.387 | 14 / 9 | |
| 0.1.386 | 14 / 9 | |
| 0.1.384 | 14 / 7 | |
| 0.1.383 | 14 / 9 | |
| 0.1.382 | 14 / 9 | |
| 0.1.381 | 14 / 9 | |
| 0.1.380 | 14 / 9 | |
| 0.1.379 | 14 / 9 | |
| 0.1.378 | 14 / 9 | |
| 0.1.377 | 14 / 9 | |
| 0.1.376 | 14 / 9 | |
| 0.1.375 | 14 / 7 | |
| 0.1.374 | 14 / 7 | |
| 0.1.373 | 14 / 7 | |
| 0.1.372 | 14 / 7 | |
| 0.1.371 | 14 / 7 | |
| 0.1.370 | 14 / 7 | |
| 0.1.369 | 14 / 7 | |
| 0.1.368 | 14 / 7 | |
| 0.1.367 | 14 / 7 | |
| 0.1.366 | 14 / 7 | |
| 0.1.365 | 14 / 7 | |
| 0.1.364 | 14 / 7 | |
| 0.1.363 | 14 / 7 | |
| 0.1.362 | 14 / 7 | |
| 0.1.361 | 14 / 7 | |
| 0.1.360 | 12 / 7 | |
| 0.1.359 | 12 / 7 | |
| 0.1.358 | 12 / 7 | |
| 0.1.357 | 12 / 7 | |
| 0.1.356 | 12 / 7 | |
| 0.1.355 | 12 / 7 |
v0.1.406
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.405
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.404
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.403
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.402
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.401
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.400
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.399
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.398
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.397
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.396
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.395
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.394
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.393
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.392
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.391
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.390
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.389
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.