@mirohq/design-system-select
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is a first-party @mirohq/design-system-* package, consistent with the established monorepo pattern. | ai | |
| provenance | no-provenance | AI (provenance): Provenance adoption is ~12% across npm; not a disqualifier for established packages. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-styles | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-spinner | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-stitches | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-base-form | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-base-select | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-scroll-area | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-base-tooltip | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-use-previous | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-primitive | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-utils | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Part of Miro's large design system monorepo; sparse metadata is a consistent pattern across all sibling packages. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Consistent with other @mirohq/design-system-* packages; not indicative of malice. | ai |
Versions (showing 51 of 100)
| Version | Deps | Published |
|---|---|---|
| 1.3.49 | 17 / 0 | |
| 1.3.48 | 17 / 0 | |
| 1.3.47 | 17 / 0 | |
| 1.3.46 | 17 / 0 | |
| 1.3.45 | 17 / 0 | |
| 1.3.44 | 17 / 0 | |
| 1.3.43 | 17 / 0 | |
| 1.3.42 | 17 / 0 | |
| 1.3.41 | 17 / 0 | |
| 1.3.40 | 17 / 0 | |
| 1.3.39 | 17 / 0 | |
| 1.3.38 | 17 / 0 | |
| 1.3.37 | 17 / 0 | |
| 1.3.36 | 17 / 0 | |
| 1.3.35 | 17 / 0 | |
| 1.3.34 | 17 / 0 | |
| 1.3.33 | 17 / 0 | |
| 1.3.32 | 17 / 0 | |
| 1.3.31 | 17 / 0 | |
| 1.3.30 | 17 / 0 | |
| 1.3.29 | 17 / 0 | |
| 1.3.25 | 17 / 0 | |
| 1.3.22 | 16 / 0 | |
| 1.3.21 | 16 / 0 | |
| 1.3.20 | 16 / 0 | |
| 1.3.19 | 16 / 0 | |
| 1.3.18 | 16 / 0 | |
| 1.3.17 | 16 / 0 | |
| 1.3.16 | 16 / 0 | |
| 1.3.15 | 16 / 0 | |
| 1.3.14 | 16 / 0 | |
| 1.3.13 | 16 / 0 | |
| 1.3.12 | 16 / 0 | |
| 1.3.11 | 16 / 0 | |
| 1.3.10 | 16 / 0 | |
| 1.3.9 | 16 / 0 | |
| 1.3.8 | 16 / 0 | |
| 1.3.7 | 16 / 0 | |
| 1.3.6 | 16 / 0 | |
| 1.3.5 | 16 / 0 | |
| 1.3.4 | 16 / 0 | |
| 1.3.3 | 16 / 0 | |
| 1.3.2 | 16 / 0 | |
| 1.3.1 | 16 / 0 | |
| 1.3.0 | 16 / 0 | |
| 1.2.12 | 16 / 0 | |
| 1.2.11 | 16 / 0 | |
| 1.2.10 | 16 / 0 | |
| 1.2.9 | 16 / 0 | |
| 1.2.8 | 16 / 0 | |
| 1.2.7 | 16 / 0 |
v1.3.49
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.48
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.47
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.46
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.45
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.44
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.43
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.42
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.