@nuxt/ui
18
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
atinuxpi0antfudanielroenuxtbotbenjamincanac
Keywords
nuxt-uinuxtvue3tailwindcsscomponent libraryvuevuejsvue.jstypescriptvue-componentsuitailwindframeworkui-framework
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:ufo | AI (phantom-deps): ufo is now a declared runtime dep; framework utility used via config conventions. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): v4.x is a new major branch of @nuxt/ui; gap reflects major version development cycle, not account takeover. | ai | |
| phantom-deps | phantom-dep:@ai-sdk/vue | AI (phantom-deps): Config-referenced dependency; stable pattern for this UI framework package. | ai | |
| phantom-deps | phantom-dep:@nuxt/icon | AI (phantom-deps): Framework-scoped Nuxt module loaded by convention, not direct import. | ai | |
| dependencies | unvetted-dep:@nuxt/schema | AI (dependencies): @nuxt/schema is a core Nuxt framework package; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@nuxtjs/color-mode | AI (phantom-deps): Nuxt module convention; loaded by framework. | ai | |
| phantom-deps | phantom-dep:embla-carousel-vue | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:@tiptap/extension-code | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:@internationalized/number | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:@tiptap/extension-node-range | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:@tiptap/extension-drag-handle | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:@tiptap/extension-collaboration | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:@tiptap/extension-horizontal-rule | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:@tailwindcss/postcss | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:@nuxt/fonts | AI (phantom-deps): Nuxt module convention; loaded by framework, not direct import. | ai | |
| phantom-deps | phantom-dep:@iconify/vue | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:tailwind-merge | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| phantom-deps | phantom-dep:colortranslator | AI (phantom-deps): Referenced in config files per Nuxt module pattern. | ai | |
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped package @nuxt/ui; Levenshtein match to short names is a false positive. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped package @nuxt/ui; Levenshtein match to short names is a false positive. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @nuxt/ui; Levenshtein match to short names is a false positive. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped package @nuxt/ui; Levenshtein match to short names is a false positive. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped package @nuxt/ui; Levenshtein match to short names is a false positive. | ai |
Versions (showing 18 of 18)
| Version | Deps | Published |
|---|---|---|
| 4.10.0 | 65 / 19 | |
| 4.9.0 | 65 / 19 | |
| 4.8.2 | 65 / 19 | |
| 4.8.1 | 65 / 19 | |
| 4.8.0 | 65 / 19 | |
| 4.7.1 | 65 / 19 | |
| 4.7.0 | 65 / 19 | |
| 4.6.1 | 65 / 19 | |
| 4.6.0 | 65 / 19 | |
| 4.5.1 | 65 / 19 | |
| 4.5.0 | 65 / 19 | |
| 4.4.0 | 65 / 19 | |
| 4.3.0 | 58 / 15 | |
| 4.2.1 | 45 / 15 | |
| 4.2.0 | 45 / 15 | |
| 4.1.0 | 46 / 16 | |
| 4.0.1 | 45 / 15 | |
| 4.0.0 | 45 / 14 |
v4.10.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.