← Home

@notion-kit/ui

1
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

steeeee0223

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:uuid AI (typosquat): Scoped monorepo package; Levenshtein match against short unrelated package names is a stable false positive. ai
typosquat typosquat.levenshtein:pg AI (typosquat): Scoped monorepo package; Levenshtein match against short unrelated package names is a stable false positive. ai
typosquat typosquat.levenshtein:qs AI (typosquat): Scoped monorepo package; Levenshtein match against short unrelated package names is a stable false positive. ai
typosquat typosquat.levenshtein:joi AI (typosquat): Scoped monorepo package; Levenshtein match against short unrelated package names is a stable false positive. ai
typosquat typosquat.levenshtein:yup AI (typosquat): Scoped monorepo package; Levenshtein match against short unrelated package names is a stable false positive. ai
phantom-deps phantom-dep:i18next AI (phantom-deps): i18next is listed as a runtime dependency in package.json; likely used via config/re-export pattern in this UI library. ai

Versions (showing 1 of 1)

Version Deps Published
1.0.0 32 / 22