@ndla/ui

UI component library for NDLA

Supply chain provenance

Status for the latest visible version.

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
typosquat	typosquat.levenshtein:uuid	AI (typosquat): Scoped @ndla/ui cannot typosquat uuid; Levenshtein match is spurious for scoped packages.	ai	2026/05/12
typosquat	typosquat.levenshtein:pg	AI (typosquat): Scoped @ndla/ui cannot typosquat pg; false positive.	ai	2026/05/12
typosquat	typosquat.levenshtein:qs	AI (typosquat): Scoped @ndla/ui cannot typosquat qs; false positive.	ai	2026/05/12
typosquat	typosquat.levenshtein:joi	AI (typosquat): Scoped @ndla/ui cannot typosquat joi; false positive.	ai	2026/05/12
typosquat	typosquat.levenshtein:yup	AI (typosquat): Scoped @ndla/ui cannot typosquat yup; false positive.	ai	2026/05/12
dependencies	unvetted-dep:@ndla/core	AI (dependencies): First-party @ndla org dependency; stable pattern across all versions of this package.	ai	2026/05/12
dependencies	unvetted-dep:@ndla/util	AI (dependencies): First-party @ndla org dependency; stable pattern.	ai	2026/05/12
dependencies	unvetted-dep:@ndla/icons	AI (dependencies): First-party @ndla org dependency; stable pattern.	ai	2026/05/12
dependencies	unvetted-dep:@ndla/licenses	AI (dependencies): First-party @ndla org dependency; stable pattern.	ai	2026/05/12
dependencies	unvetted-dep:@ndla/safelink	AI (dependencies): First-party @ndla org dependency; stable pattern.	ai	2026/05/12
dependencies	unvetted-dep:@ndla/primitives	AI (dependencies): First-party @ndla org dependency; stable pattern.	ai	2026/05/12

Version	Deps	Published
56.0.136	9 / 4	2025-08-29