@mushi-mushi/react-native
React Native SDK for Mushi Mushi — shake-to-report, bottom sheet widget, full context capture
27
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
kensaurus
Keywords
mushi-mushibug-reportinguser-feedbackuser-reportfeedback-widgetreact-nativeexposhake-to-reportbottom-sheetscreenshotsession-replayoffline-queuesentry-companionsentry-alternativeerror-trackingai-triageauto-fixllm-opsai-agentsdk
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from manual publish (kensaurus) to GitHub Actions CI/CD with SLSA provenance; legitimate automation. | ai | |
| provenance | missing-githead | AI (provenance): gitHead often absent in CI/CD publishes; SLSA attestation provides stronger commit linkage. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is a same-org sibling (@mushi-mushi/web); consistent with SDK expansion, not a suspicious third-party injection. | ai | |
| provenance | slsa-provenance | AI (provenance): Package consistently publishes with SLSA provenance attestation; stable positive signal for this package. | ai |
Versions (showing 27 of 27)
| Version | Deps | Published |
|---|---|---|
| 0.21.0 | 2 / 11 | |
| 0.20.1 | 2 / 6 | |
| 0.20.0 | 2 / 6 | |
| 0.19.2 | 1 / 6 | |
| 0.19.1 | 1 / 6 | |
| 0.19.0 | 1 / 6 | |
| 0.18.1 | 1 / 6 | |
| 0.17.0 | 1 / 6 | |
| 0.16.0 | 1 / 6 | |
| 0.15.2 | 1 / 6 | |
| 0.15.1 | 1 / 6 | |
| 0.13.1 | 1 / 6 | |
| 0.13.0 | 1 / 6 | |
| 0.12.0 | 1 / 6 | |
| 0.11.0 | 1 / 6 | |
| 0.8.2 | 1 / 6 | |
| 0.8.1 | 1 / 6 | |
| 0.8.0 | 1 / 6 | |
| 0.7.0 | 1 / 6 | |
| 0.3.2 | 1 / 6 | |
| 0.3.1 | 1 / 6 | |
| 0.3.0 | 1 / 6 | |
| 0.2.3 | 1 / 6 | |
| 0.2.2 | 1 / 6 | |
| 0.2.1 | 1 / 6 | |
| 0.2.0 | 1 / 6 | |
| 0.1.0 | 0 / 5 |
v0.21.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.20.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.