@meshagent/meshagent-tailwind
Meshagent Tailwind Components
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@meshagent/meshagent-agents | AI (dependencies): First-party sibling package from the same @meshagent org; stable across versions. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Legitimate UI component library; README link dump heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:esbuild-plugin-alias | AI (phantom-deps): Used in build.js config; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:yjs | AI (phantom-deps): Declared as runtime dep for collaborative features; phantom-dep heuristic false positive for this UI library. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-checkbox | AI (phantom-deps): Declared runtime dep for UI components; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-icons | AI (phantom-deps): Declared runtime dep for UI components; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:base-64 | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this package. | ai |
Versions (showing 47 of 47)
| Version | Deps | Published |
|---|---|---|
| 0.46.4 | 34 / 27 | |
| 0.46.3 | 34 / 27 | |
| 0.46.2 | 34 / 27 | |
| 0.46.1 | 34 / 27 | |
| 0.46.0 | 34 / 27 | |
| 0.45.7 | 34 / 27 | |
| 0.45.6 | 34 / 27 | |
| 0.45.5 | 34 / 27 | |
| 0.45.4 | 34 / 27 | |
| 0.45.2 | 34 / 27 | |
| 0.45.1 | 34 / 27 | |
| 0.45.0 | 34 / 27 | |
| 0.44.13 | 34 / 27 | |
| 0.44.12 | 34 / 27 | |
| 0.44.11 | 33 / 27 | |
| 0.44.10 | 33 / 27 | |
| 0.44.9 | 33 / 27 | |
| 0.44.8 | 33 / 27 | |
| 0.44.7 | 33 / 27 | |
| 0.44.6 | 33 / 27 | |
| 0.44.5 | 33 / 27 | |
| 0.44.4 | 33 / 27 | |
| 0.44.3 | 33 / 27 | |
| 0.44.2 | 33 / 27 | |
| 0.44.1 | 33 / 27 | |
| 0.44.0 | 33 / 27 | |
| 0.43.3 | 33 / 27 | |
| 0.43.2 | 33 / 23 | |
| 0.43.1 | 33 / 23 | |
| 0.43.0 | 33 / 23 | |
| 0.42.2 | 33 / 23 | |
| 0.42.0 | 33 / 23 | |
| 0.41.9 | 33 / 23 | |
| 0.41.7 | 33 / 23 | |
| 0.41.6 | 33 / 23 | |
| 0.41.5 | 33 / 23 | |
| 0.39.9 | 28 / 22 | |
| 0.39.3 | 28 / 22 | |
| 0.35.6 | 28 / 22 | |
| 0.29.1 | 28 / 22 | |
| 0.28.11 | 28 / 22 | |
| 0.28.3 | 28 / 22 | |
| 0.28.1 | 28 / 22 | |
| 0.28.0 | 28 / 22 | |
| 0.20.1 | 28 / 22 | |
| 0.19.1 | 28 / 22 | |
| 0.6.0 | 28 / 22 |
v0.46.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.46.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.46.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.46.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.46.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.45.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.45.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.45.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.45.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.45.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.45.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.45.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.44.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.