@paprika/list-box-with-tags MIT 2 versions

@paprika/list-box-with-tags

npm Repository Homepage

Allowed the consumer to display a ListBox that show the selected option in a shape of pills

Versions

MIT

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

vkhimichpaprika-cinandez89

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
publish-pattern	dormant-publish	AI (publish-pattern): SLSA provenance via CI/CD with Sigstore attestation mitigates account-takeover concern for this package.	ai	2026/05/31
dependencies	unvetted-dep:icons	AI (dependencies): Stable dependency declared across many versions of this long-lived monorepo package.	ai	2026/05/31
phantom-deps	phantom-dep:icons	AI (phantom-deps): icons is a declared runtime dep in package.json; phantom-dep heuristic fires incorrectly for this package.	ai	2026/05/20

Version	Deps	Published
6.0.5	12 / 0	2026-05-02
6.0.4	12 / 0	2026-01-09

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.