@mui/core-downloads-tracker
Internal package to track number of downloads of our design system libraries.
100
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
No source commit
Maintainers
diegoandaibrijeshb42michaldudakmnajdovasiriwatknpmj12albertaarongarciahatomiksoliviertassinarisilviuaavramjanpotoms
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): mui-release-bot is a standard CI/CD release automation account for the MUI monorepo; this addition is expected and benign for this package. | ai | |
| provenance | missing-githead | AI (provenance): MUI internal tracker package with no code; missing gitHead reflects publish tooling change, not a security concern. | ai | |
| bogus-package | bogus-package | AI (bogus-package): This is an intentionally near-empty internal MUI tracking package; tiny payload, no deps, no README code are all by design. | ai | |
| provenance | publisher-changed | AI (provenance): MUI team rotates which member publishes releases; both siriwatknp and mj12albert are established MUI contributors. | ai |
Versions (showing 100 of 160)
| Version | Deps | Published |
|---|---|---|
| 9.2.0 | 0 / 0 | |
| 9.1.2 | 0 / 0 | |
| 9.1.1 | 0 / 0 | |
| 9.1.0 | 0 / 0 | |
| 9.0.1 | 0 / 0 | |
| 9.0.0 | 0 / 0 | |
| 7.3.11 | 0 / 0 | |
| 7.3.10 | 0 / 0 | |
| 7.3.9 | 0 / 0 | |
| 7.3.8 | 0 / 0 | |
| 7.3.7 | 0 / 0 | |
| 7.3.6 | 0 / 0 | |
| 7.3.5 | 0 / 0 | |
| 7.3.4 | 0 / 0 | |
| 7.3.3 | 0 / 0 | |
| 7.3.2 | 0 / 0 | |
| 7.3.1 | 0 / 0 | |
| 7.3.0 | 0 / 0 | |
| 7.2.0 | 0 / 0 | |
| 7.1.2 | 0 / 0 | |
| 7.1.1 | 0 / 0 | |
| 7.1.0 | 0 / 0 | |
| 7.0.2 | 0 / 0 | |
| 7.0.1 | 0 / 0 | |
| 7.0.0 | 0 / 0 | |
| 6.5.0 | 0 / 0 | |
| 6.4.12 | 0 / 0 | |
| 6.4.11 | 0 / 0 | |
| 6.4.10 | 0 / 0 | |
| 6.4.9 | 0 / 0 | |
| 6.4.8 | 0 / 0 | |
| 6.4.7 | 0 / 0 | |
| 6.4.6 | 0 / 0 | |
| 6.4.5 | 0 / 0 | |
| 6.4.4 | 0 / 0 | |
| 6.4.3 | 0 / 0 | |
| 6.4.2 | 0 / 0 | |
| 6.4.1 | 0 / 0 | |
| 6.4.0 | 0 / 0 | |
| 6.3.1 | 0 / 0 | |
| 6.3.0 | 0 / 0 | |
| 6.2.1 | 0 / 0 | |
| 6.2.0 | 0 / 0 | |
| 6.1.10 | 0 / 0 | |
| 6.1.9 | 0 / 0 | |
| 6.1.8 | 0 / 0 | |
| 6.1.7 | 0 / 0 | |
| 6.1.6 | 0 / 0 | |
| 6.1.5 | 0 / 0 | |
| 6.1.4 | 0 / 0 | |
| 6.1.3 | 0 / 0 | |
| 6.1.2 | 0 / 0 | |
| 6.1.1 | 0 / 0 | |
| 6.1.0 | 0 / 0 | |
| 6.0.2 | 0 / 0 | |
| 6.0.1 | 0 / 0 | |
| 6.0.0 | 0 / 0 | |
| 5.18.0 | 0 / 0 | |
| 5.17.1 | 0 / 0 | |
| 5.17.0 | 0 / 0 | |
| 5.16.14 | 0 / 0 | |
| 5.16.13 | 0 / 0 | |
| 5.16.12 | 0 / 0 | |
| 5.16.11 | 0 / 0 | |
| 5.16.9 | 0 / 0 | |
| 5.16.8 | 0 / 0 | |
| 5.16.7 | 0 / 0 | |
| 5.16.6 | 0 / 0 | |
| 5.16.5 | 0 / 0 | |
| 5.16.4 | 0 / 0 | |
| 5.16.3 | 0 / 0 | |
| 5.16.2 | 0 / 0 | |
| 5.16.1 | 0 / 0 | |
| 5.16.0 | 0 / 0 | |
| 5.15.21 | 0 / 0 | |
| 5.15.20 | 0 / 0 | |
| 5.15.19 | 0 / 0 | |
| 5.15.18 | 0 / 0 | |
| 5.15.17 | 0 / 0 | |
| 5.15.16 | 0 / 0 | |
| 5.15.15 | 0 / 0 | |
| 5.15.14 | 0 / 0 | |
| 5.15.13 | 0 / 0 | |
| 5.15.12 | 0 / 0 | |
| 5.15.11 | 0 / 0 | |
| 5.15.10 | 0 / 0 | |
| 5.15.9 | 0 / 0 | |
| 5.15.8 | 0 / 0 | |
| 5.15.7 | 0 / 0 | |
| 5.15.6 | 0 / 0 | |
| 5.15.5 | 0 / 0 | |
| 5.15.4 | 0 / 0 | |
| 5.15.3 | 0 / 0 | |
| 5.15.2 | 0 / 0 | |
| 5.15.1 | 0 / 0 | |
| 5.15.0 | 0 / 0 | |
| 5.14.20 | 0 / 0 | |
| 5.14.19 | 0 / 0 | |
| 5.14.18 | 0 / 0 | |
| 5.14.17 | 0 / 0 |
Showing 100 of 160
Next page →
v9.2.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.