@mirohq/design-system-select
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is a first-party @mirohq/design-system-* package, consistent with the established monorepo pattern. | ai | |
| provenance | no-provenance | AI (provenance): Provenance adoption is ~12% across npm; not a disqualifier for established packages. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-styles | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-spinner | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-stitches | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-base-form | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-base-select | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-scroll-area | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-base-tooltip | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-use-previous | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-primitive | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| dependencies | unvetted-dep:@mirohq/design-system-utils | AI (dependencies): Internal Miro design system sibling package; consistent monorepo pattern across all versions. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Part of Miro's large design system monorepo; sparse metadata is a consistent pattern across all sibling packages. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Consistent with other @mirohq/design-system-* packages; not indicative of malice. | ai |
Versions (showing 100 of 101)
| Version | Deps | Published |
|---|---|---|
| 1.3.50 | 17 / 0 | |
| 1.3.49 | 17 / 0 | |
| 1.3.48 | 17 / 0 | |
| 1.3.47 | 17 / 0 | |
| 1.3.46 | 17 / 0 | |
| 1.3.45 | 17 / 0 | |
| 1.3.44 | 17 / 0 | |
| 1.3.43 | 17 / 0 | |
| 1.3.42 | 17 / 0 | |
| 1.3.41 | 17 / 0 | |
| 1.3.40 | 17 / 0 | |
| 1.3.39 | 17 / 0 | |
| 1.3.38 | 17 / 0 | |
| 1.3.37 | 17 / 0 | |
| 1.3.36 | 17 / 0 | |
| 1.3.35 | 17 / 0 | |
| 1.3.34 | 17 / 0 | |
| 1.3.33 | 17 / 0 | |
| 1.3.32 | 17 / 0 | |
| 1.3.31 | 17 / 0 | |
| 1.3.30 | 17 / 0 | |
| 1.3.29 | 17 / 0 | |
| 1.3.25 | 17 / 0 | |
| 1.3.22 | 16 / 0 | |
| 1.3.21 | 16 / 0 | |
| 1.3.20 | 16 / 0 | |
| 1.3.19 | 16 / 0 | |
| 1.3.18 | 16 / 0 | |
| 1.3.17 | 16 / 0 | |
| 1.3.16 | 16 / 0 | |
| 1.3.15 | 16 / 0 | |
| 1.3.14 | 16 / 0 | |
| 1.3.13 | 16 / 0 | |
| 1.3.12 | 16 / 0 | |
| 1.3.11 | 16 / 0 | |
| 1.3.10 | 16 / 0 | |
| 1.3.9 | 16 / 0 | |
| 1.3.8 | 16 / 0 | |
| 1.3.7 | 16 / 0 | |
| 1.3.6 | 16 / 0 | |
| 1.3.5 | 16 / 0 | |
| 1.3.4 | 16 / 0 | |
| 1.3.3 | 16 / 0 | |
| 1.3.2 | 16 / 0 | |
| 1.3.1 | 16 / 0 | |
| 1.3.0 | 16 / 0 | |
| 1.2.12 | 16 / 0 | |
| 1.2.11 | 16 / 0 | |
| 1.2.10 | 16 / 0 | |
| 1.2.9 | 16 / 0 | |
| 1.2.8 | 16 / 0 | |
| 1.2.7 | 16 / 0 | |
| 1.2.6 | 16 / 0 | |
| 1.2.5 | 16 / 0 | |
| 1.2.4 | 16 / 0 | |
| 1.2.3 | 16 / 0 | |
| 1.2.2 | 16 / 0 | |
| 1.2.1 | 16 / 0 | |
| 1.2.0 | 16 / 0 | |
| 1.1.16 | 16 / 0 | |
| 1.1.15 | 16 / 0 | |
| 1.1.14 | 16 / 0 | |
| 1.1.13 | 16 / 0 | |
| 1.1.12 | 16 / 0 | |
| 1.1.11 | 16 / 0 | |
| 1.1.10 | 16 / 0 | |
| 1.1.9 | 16 / 0 | |
| 1.1.8 | 16 / 0 | |
| 1.1.7 | 16 / 0 | |
| 1.1.6 | 16 / 0 | |
| 1.1.5 | 16 / 0 | |
| 1.1.4 | 16 / 0 | |
| 1.1.3 | 16 / 0 | |
| 1.1.2 | 16 / 0 | |
| 1.1.1 | 16 / 0 | |
| 1.1.0 | 16 / 0 | |
| 1.0.24 | 16 / 0 | |
| 1.0.23 | 16 / 0 | |
| 1.0.22 | 16 / 0 | |
| 1.0.21 | 16 / 0 | |
| 1.0.20 | 16 / 0 | |
| 1.0.19 | 16 / 0 | |
| 1.0.18 | 16 / 0 | |
| 1.0.17 | 16 / 0 | |
| 1.0.16 | 16 / 0 | |
| 1.0.15 | 16 / 0 | |
| 1.0.14 | 16 / 0 | |
| 1.0.13 | 16 / 0 | |
| 1.0.12 | 16 / 0 | |
| 1.0.11 | 16 / 0 | |
| 1.0.10 | 16 / 0 | |
| 1.0.9 | 16 / 0 | |
| 1.0.8 | 16 / 0 | |
| 1.0.7 | 16 / 0 | |
| 1.0.6 | 16 / 0 | |
| 1.0.5 | 16 / 0 | |
| 1.0.4 | 16 / 0 | |
| 1.0.3 | 16 / 0 | |
| 1.0.2 | 16 / 0 | |
| 1.0.1 | 16 / 0 |
v1.3.50
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.49
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.48
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.47
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.46
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.45
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.44
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.43
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.3.42
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.