@parhelia/core
Core components and utilities for the Parhelia visual content editor for Sitecore.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:next-themes | AI (phantom-deps): UI component library; config/re-export usage pattern is stable for this package. | ai | |
| phantom-deps | phantom-dep:@uiw/react-md-editor | AI (phantom-deps): UI component library; config/re-export usage pattern is stable for this package. | ai | |
| phantom-deps | phantom-dep:react-quill-new | AI (phantom-deps): UI component library; config/re-export usage pattern is stable for this package. | ai | |
| phantom-deps | phantom-dep:follow-redirects | AI (phantom-deps): follow-redirects is a transitive dep of axios; phantom finding is a stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/editor/ai/terminal/components/AgentCostDisplay.js | AI (source-diff): File is readable compiled TypeScript/JSX output, not obfuscated; long lines are from bundled imports, not malicious code. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-menubar | AI (phantom-deps): Radix UI components are used via re-exports/config; phantom finding is a stable false positive for this UI library. | ai | |
| phantom-deps | phantom-dep:axios | AI (phantom-deps): axios is a declared dep used indirectly; phantom finding is a stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@uiw/react-textarea-code-editor | AI (dependencies): Legitimate open-source React code editor component; stable dependency for this package. | ai | |
| provenance | no-provenance | AI (provenance): Consistent across all 170 versions; no CI provenance setup for this package. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): Scoped UI library @parhelia/core; name collision with 'cors' is coincidental, not impersonation. | ai | |
| phantom-deps | phantom-dep:@uiw/react-textarea-code-editor | AI (phantom-deps): UI component dep; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-context-menu | AI (phantom-deps): Radix UI component; consistent with the rest of the Radix dependency set. | ai | |
| phantom-deps | phantom-dep:react-inspector | AI (phantom-deps): UI component dep; likely used conditionally or via re-export. | ai | |
| phantom-deps | phantom-dep:tw-animate-css | AI (phantom-deps): CSS utility; referenced in config, not directly imported in JS. | ai | |
| phantom-deps | phantom-dep:@types/lodash | AI (phantom-deps): Type-only package; convention-loaded by TypeScript toolchain. | ai | |
| phantom-deps | phantom-dep:@types/diff | AI (phantom-deps): Type-only package; convention-loaded by TypeScript toolchain. | ai | |
| phantom-deps | phantom-dep:slate-dom | AI (phantom-deps): Slate ecosystem peer; loaded transitively, not directly imported. | ai | |
| phantom-deps | phantom-dep:postcss | AI (phantom-deps): Used in build/config context; standard for Tailwind-based component libraries. | ai |
Versions (showing 100 of 264)
| Version | Deps | Published |
|---|---|---|
| 0.3.12771 | 49 / 16 | |
| 0.3.12770 | 49 / 16 | |
| 0.3.12769 | 49 / 16 | |
| 0.3.12768 | 49 / 16 | |
| 0.3.12767 | 49 / 16 | |
| 0.3.12763 | 49 / 16 | |
| 0.2.12783 | 49 / 17 | |
| 0.2.12782 | 49 / 17 | |
| 0.2.12781 | 49 / 17 | |
| 0.2.12780 | 49 / 17 | |
| 0.2.12779 | 49 / 16 | |
| 0.2.12778 | 49 / 16 | |
| 0.2.12777 | 49 / 16 | |
| 0.2.12776 | 49 / 16 | |
| 0.2.12775 | 49 / 16 | |
| 0.2.12773 | 49 / 16 | |
| 0.2.12772 | 49 / 16 | |
| 0.2.12771 | 49 / 16 | |
| 0.2.12770 | 49 / 16 | |
| 0.2.12768 | 49 / 16 | |
| 0.2.12766 | 49 / 16 | |
| 0.2.12764 | 49 / 16 | |
| 0.2.12763 | 49 / 16 | |
| 0.1.12942 | 49 / 16 | |
| 0.1.12940 | 49 / 16 | |
| 0.1.12939 | 49 / 16 | |
| 0.1.12938 | 49 / 16 | |
| 0.1.12937 | 49 / 16 | |
| 0.1.12936 | 49 / 15 | |
| 0.1.12935 | 49 / 15 | |
| 0.1.12934 | 49 / 15 | |
| 0.1.12933 | 49 / 15 | |
| 0.1.12931 | 49 / 15 | |
| 0.1.12928 | 49 / 15 | |
| 0.1.12927 | 49 / 15 | |
| 0.1.12926 | 49 / 15 | |
| 0.1.12924 | 49 / 15 | |
| 0.1.12923 | 49 / 15 | |
| 0.1.12922 | 49 / 15 | |
| 0.1.12921 | 49 / 15 | |
| 0.1.12920 | 49 / 15 | |
| 0.1.12919 | 49 / 15 | |
| 0.1.12918 | 48 / 15 | |
| 0.1.12917 | 48 / 15 | |
| 0.1.12912 | 48 / 15 | |
| 0.1.12911 | 48 / 15 | |
| 0.1.12910 | 48 / 15 | |
| 0.1.12909 | 48 / 15 | |
| 0.1.12903 | 48 / 15 | |
| 0.1.12902 | 48 / 15 | |
| 0.1.12901 | 48 / 15 | |
| 0.1.12900 | 48 / 15 | |
| 0.1.12895 | 48 / 15 | |
| 0.1.12894 | 48 / 15 | |
| 0.1.12892 | 48 / 15 | |
| 0.1.12891 | 48 / 15 | |
| 0.1.12890 | 47 / 15 | |
| 0.1.12889 | 47 / 15 | |
| 0.1.12888 | 48 / 15 | |
| 0.1.12886 | 48 / 15 | |
| 0.1.12884 | 48 / 15 | |
| 0.1.12883 | 48 / 15 | |
| 0.1.12882 | 47 / 15 | |
| 0.1.12881 | 48 / 15 | |
| 0.1.12880 | 47 / 15 | |
| 0.1.12879 | 48 / 15 | |
| 0.1.12877 | 48 / 15 | |
| 0.1.12876 | 48 / 15 | |
| 0.1.12875 | 48 / 15 | |
| 0.1.12870 | 47 / 15 | |
| 0.1.12868 | 47 / 15 | |
| 0.1.12856 | 47 / 15 | |
| 0.1.12844 | 47 / 15 | |
| 0.1.12843 | 47 / 15 | |
| 0.1.12841 | 47 / 15 | |
| 0.1.12839 | 47 / 15 | |
| 0.1.12838 | 47 / 15 | |
| 0.1.12836 | 47 / 15 | |
| 0.1.12777 | 45 / 15 | |
| 0.1.12776 | 45 / 15 | |
| 0.1.12775 | 45 / 15 | |
| 0.1.12774 | 45 / 15 | |
| 0.1.12772 | 45 / 15 | |
| 0.1.12767 | 45 / 15 | |
| 0.1.12766 | 45 / 15 | |
| 0.1.12763 | 45 / 12 | |
| 0.1.12762 | 45 / 12 | |
| 0.1.12760 | 45 / 12 | |
| 0.1.12758 | 45 / 12 | |
| 0.1.12756 | 45 / 12 | |
| 0.1.12755 | 45 / 12 | |
| 0.1.12752 | 45 / 12 | |
| 0.1.12749 | 45 / 12 | |
| 0.1.12744 | 45 / 12 | |
| 0.1.12741 | 45 / 12 | |
| 0.1.12737 | 45 / 12 | |
| 0.1.12730 | 45 / 12 | |
| 0.1.12719 | 45 / 12 | |
| 0.1.12710 | 45 / 12 | |
| 0.1.12705 | 45 / 12 |
v0.3.12771
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12770
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12769
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12768
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12767
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.3.12763
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12783
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12782
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12781
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12780
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12779
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12778
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12777
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12776
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12775
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12773
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12772
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12771
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12770
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12768
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12766
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12764
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.12763
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12942
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12940
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12939
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12938
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12937
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12936
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12935
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12934
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12933
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12931
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12928
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12927
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12926
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12924
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12923
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12922
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12921
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12920
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12919
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12918
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.1.12917
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.