@parhelia/alpaca
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@graphiql/plugin-explorer | AI (dependencies): @graphiql/plugin-explorer is a well-known GraphQL explorer plugin; stable legitimate dependency for this UI package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Package is a scoped UI component library under active development; missing metadata is sloppy but not indicative of malice. | ai | |
| phantom-deps | phantom-dep:postcss | AI (phantom-deps): postcss is a build-time dep used in config files; phantom-dep false positive for this package. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): react-dom referenced in config/type context; stable false positive for this UI library. | ai | |
| phantom-deps | phantom-dep:@uiw/react-textarea-code-editor | AI (phantom-deps): Likely re-exported or used indirectly; stable false positive for this package. | ai |
Versions (showing 51 of 131)
| Version | Deps | Published |
|---|---|---|
| 0.3.12771 | 11 / 9 | |
| 0.3.12770 | 11 / 9 | |
| 0.3.12769 | 11 / 9 | |
| 0.3.12768 | 11 / 9 | |
| 0.3.12767 | 11 / 9 | |
| 0.3.12763 | 11 / 9 | |
| 0.2.12783 | 11 / 10 | |
| 0.2.12782 | 11 / 10 | |
| 0.2.12781 | 11 / 10 | |
| 0.2.12780 | 11 / 10 | |
| 0.2.12779 | 11 / 9 | |
| 0.2.12778 | 11 / 9 | |
| 0.2.12777 | 11 / 9 | |
| 0.2.12776 | 11 / 9 | |
| 0.2.12775 | 11 / 9 | |
| 0.2.12773 | 11 / 9 | |
| 0.2.12772 | 11 / 9 | |
| 0.2.12771 | 11 / 9 | |
| 0.2.12770 | 11 / 9 | |
| 0.2.12768 | 11 / 9 | |
| 0.2.12766 | 11 / 9 | |
| 0.2.12764 | 11 / 9 | |
| 0.2.12763 | 11 / 9 | |
| 0.1.12942 | 11 / 9 | |
| 0.1.12940 | 11 / 9 | |
| 0.1.12939 | 11 / 9 | |
| 0.1.12938 | 11 / 9 | |
| 0.1.12937 | 11 / 9 | |
| 0.1.12936 | 11 / 9 | |
| 0.1.12934 | 11 / 9 | |
| 0.1.12933 | 11 / 9 | |
| 0.1.12931 | 11 / 9 | |
| 0.1.12928 | 11 / 9 | |
| 0.1.12927 | 11 / 9 | |
| 0.1.12926 | 11 / 9 | |
| 0.1.12924 | 11 / 9 | |
| 0.1.12923 | 11 / 9 | |
| 0.1.12922 | 11 / 9 | |
| 0.1.12921 | 11 / 9 | |
| 0.1.12920 | 11 / 9 | |
| 0.1.12919 | 11 / 9 | |
| 0.1.12918 | 11 / 9 | |
| 0.1.12917 | 11 / 9 | |
| 0.1.12912 | 11 / 9 | |
| 0.1.12911 | 11 / 9 | |
| 0.1.12910 | 11 / 9 | |
| 0.1.12909 | 11 / 9 | |
| 0.1.12907 | 11 / 9 | |
| 0.1.12906 | 11 / 9 | |
| 0.1.12905 | 11 / 9 | |
| 0.1.12904 | 11 / 9 |
v0.3.12771
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12770
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12769
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12768
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12767
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12763
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12783
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12782
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12781
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12780
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12779
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12778
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12777
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12776
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12775
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12773
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12772
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12771
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12770
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12768
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12766
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12764
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12763
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12942
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12940
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12939
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12938
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12937
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12936
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12934
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12933
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12931
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12928
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12927
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12926
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12924
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12923
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12922
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12921
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12920
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12919
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12918
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12917
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.