← Home

@mercurjs/dashboard-shared

npm Repository Homepage
6
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

mercurjs

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata no-description AI (npm-metadata): Established mercurjs monorepo package; missing description is a style issue, not a risk indicator. ai
phantom-deps phantom-dep:react-jwt AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:react-country-flag AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:match-sorter AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:qs AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:@ariakit/react AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Framework-scoped runtime dep; loaded by convention, not direct import. ai
phantom-deps phantom-dep:@medusajs/dashboard AI (phantom-deps): Shared dashboard library; deps declared for re-export/config use, not direct import. ai
phantom-deps phantom-dep:i18next-http-backend AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:@medusajs/admin-shared AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:@radix-ui/react-dialog AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:i18next-browser-languagedetector AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:@radix-ui/react-dismissable-layer AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai
phantom-deps phantom-dep:react-helmet-async AI (phantom-deps): Declared dependency used in config/re-export context typical for shared UI packages. ai

Versions (showing 6 of 6)

Version Deps Published
2.1.2 38 / 8
2.1.1 38 / 8
2.1.0 38 / 8
2.0.2 38 / 8
2.0.1 38 / 8
2.0.0 38 / 8

v2.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.