@orderly.network/chart
Charting library for Orderly Network
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:chalk | AI (typosquat): Scoped charting package for Orderly Network; not a typosquat of chalk — different namespace, purpose, and audience. | ai | |
| phantom-deps | phantom-dep:d3-axis | AI (phantom-deps): d3 sub-packages are runtime deps used in build output; phantom-dep heuristic fires because direct import is in bundled dist. | ai | |
| phantom-deps | phantom-dep:d3-array | AI (phantom-deps): Same as d3-axis — bundled d3 usage not directly imported at source level. | ai | |
| phantom-deps | phantom-dep:d3-scale | AI (phantom-deps): Same as d3-axis — bundled d3 usage not directly imported at source level. | ai | |
| phantom-deps | phantom-dep:d3-shape | AI (phantom-deps): Same as d3-axis — bundled d3 usage not directly imported at source level. | ai | |
| phantom-deps | phantom-dep:d3-selection | AI (phantom-deps): Same as d3-axis — bundled d3 usage not directly imported at source level. | ai |
Versions (showing 38 of 38)
| Version | Deps | Published |
|---|---|---|
| 3.1.6 | 9 / 12 | |
| 3.1.5 | 9 / 12 | |
| 3.1.4 | 9 / 12 | |
| 3.1.3 | 9 / 12 | |
| 3.1.2 | 9 / 12 | |
| 3.1.1 | 9 / 12 | |
| 3.1.0 | 9 / 12 | |
| 3.0.4 | 9 / 12 | |
| 3.0.3 | 9 / 12 | |
| 3.0.2 | 9 / 12 | |
| 3.0.1 | 9 / 12 | |
| 3.0.0 | 9 / 12 | |
| 2.12.4 | 9 / 12 | |
| 2.12.3 | 9 / 12 | |
| 2.12.2 | 9 / 12 | |
| 2.12.1 | 9 / 12 | |
| 2.12.0 | 9 / 12 | |
| 2.11.2 | 9 / 12 | |
| 2.11.1 | 9 / 12 | |
| 2.11.0 | 9 / 12 | |
| 2.10.2 | 9 / 12 | |
| 2.10.1 | 9 / 12 | |
| 2.10.0 | 9 / 12 | |
| 2.9.1 | 9 / 12 | |
| 2.9.0 | 9 / 12 | |
| 2.8.14 | 9 / 12 | |
| 2.8.13 | 9 / 12 | |
| 2.8.12 | 9 / 12 | |
| 2.8.11 | 9 / 12 | |
| 2.8.10 | 9 / 12 | |
| 2.8.9 | 9 / 12 | |
| 2.8.8 | 9 / 12 | |
| 2.8.7 | 9 / 12 | |
| 2.8.6 | 9 / 12 | |
| 2.8.5 | 9 / 12 | |
| 2.8.4 | 9 / 12 | |
| 2.8.3 | 9 / 12 | |
| 2.8.2 | 9 / 12 |
v3.1.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.