← Home

@lottiefiles/dotlottie-react

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures No source commit

Maintainers

jawishnattuadnan

Keywords

dotlottielottieplayeranimationwebcanvasjavascriptreactthorvg

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/browser/index.js AI (source-diff): tsup-bundled minified browser build, not obfuscation; stable for this package. ai
source-diff source-size-tripled AI (source-diff): Size growth from bundling dotlottie-web player into browser dist; expected. ai
provenance publisher-changed AI (provenance): LottieFiles org migrated publishing to GitHub Actions CI/CD with SLSA provenance; this is a legitimate automation transition. ai
maintainer-change maintainer-added AI (maintainer-change): New maintainer added within the LottieFiles org; consistent with org-level team management, not a hostile takeover. ai

Versions (showing 51 of 97)

View all versions
Version Deps Published
0.19.12 1 / 14
0.19.11 1 / 14
0.19.10 1 / 14
0.19.9 1 / 14
0.19.8 1 / 14
0.19.7 1 / 14
0.19.6 1 / 14
0.19.5 1 / 14
0.19.4 1 / 14
0.19.3 1 / 14
0.19.2 1 / 14
0.19.1 1 / 14
0.19.0 1 / 14
0.18.10 1 / 13
0.18.9 1 / 13
0.18.8 1 / 13
0.18.7 1 / 13
0.18.6 1 / 13
0.18.5 1 / 13
0.18.4 1 / 13
0.18.3 1 / 13
0.18.2 1 / 13
0.18.1 1 / 13
0.18.0 1 / 13
0.17.15 1 / 14
0.17.14 1 / 14
0.17.13 1 / 14
0.17.12 1 / 14
0.17.10 1 / 14
0.17.9 1 / 14
0.17.8 1 / 14
0.17.7 1 / 14
0.17.6 1 / 14
0.17.5 1 / 14
0.17.4 1 / 14
0.17.3 1 / 14
0.17.2 1 / 14
0.17.1 1 / 14
0.17.0 1 / 14
0.16.4 1 / 14
0.16.3 1 / 14
0.16.2 1 / 14
0.16.1 1 / 14
0.16.0 1 / 14
0.15.2 1 / 12
0.15.1 1 / 12
0.15.0 1 / 12
0.14.4 1 / 12
0.14.3 1 / 12
0.14.2 1 / 12
0.14.1 1 / 12

v0.19.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.