@pega/cosmos-react-build SEE LICENSE IN LICENSE 67 versions

@pega/cosmos-react-build

npm

67

Versions

SEE LICENSE IN LICENSE

License

No

Install Scripts

Missing

Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

bob-difronzocpmotionssowersbyricmarspega-cosmos

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
publish-pattern	rapid-publish	AI (publish-pattern): Automated CI release pipeline for a large monorepo; rapid publishes are normal for this package family.	ai	2026/05/29
bogus-package	bogus-package	AI (bogus-package): Scoped enterprise package from Pegasystems; missing metadata fields are intentional, not spam indicators.	ai	2026/05/27
npm-metadata	no-description	AI (npm-metadata): Intentional for this scoped Pegasystems build package; stable across versions.	ai	2026/05/27
phantom-deps	phantom-dep:dagre	AI (phantom-deps): Build tooling package; dagre is a peer/config dependency, not directly imported.	ai	2026/05/27
phantom-deps	phantom-dep:@types/styled-components	AI (phantom-deps): @types/* packages are type-only, loaded by convention — stable false positive for this build package.	ai	2026/05/01
phantom-deps	phantom-dep:@types/react	AI (phantom-deps): @types/* packages are type-only, loaded by convention — stable false positive for this build package.	ai	2026/05/01
phantom-deps	phantom-dep:@pega/cosmos-react-dnd	AI (phantom-deps): Same-org dep re-exported by this build aggregator; phantom-dep heuristic misfires here.	ai	2026/05/01
phantom-deps	phantom-dep:tinymce	AI (phantom-deps): tinymce is a declared runtime dep used in RTE component; phantom-dep heuristic misfires on build aggregator packages.	ai	2026/05/01
phantom-deps	phantom-dep:@types/react-dom	AI (phantom-deps): @types/* packages are type-only, loaded by convention — stable false positive for this build package.	ai	2026/05/01
phantom-deps	phantom-dep:@types/dagre	AI (phantom-deps): @types/* packages are type-only, loaded by convention — stable false positive for this build package.	ai	2026/05/01
phantom-deps	phantom-dep:@types/codemirror	AI (phantom-deps): @types/* packages are type-only, loaded by convention — stable false positive for this build package.	ai	2026/05/01

Versions (showing 67 of 67)

Version	Deps	Published
8.21.7	17 / 5	2026-05-26
8.21.6	17 / 5	2026-05-22
8.21.5	17 / 5	2026-05-19
8.21.4	17 / 5	2026-05-15
8.21.3	17 / 5	2026-05-14
8.21.2	17 / 5	2026-05-13
8.21.1	17 / 5	2026-05-05
8.21.0	17 / 5	2026-04-30
8.20.0	17 / 5	2026-04-30
8.19.0	17 / 5	2026-04-28
8.18.3	17 / 5	2026-04-27
8.18.2	17 / 5	2026-04-27
8.18.1	17 / 5	2026-04-23
8.18.0	17 / 5	2026-04-22
8.17.2	17 / 5	2026-04-20
8.17.1	17 / 5	2026-04-16
8.17.0	17 / 5	2026-04-10
8.16.1	17 / 5	2026-04-08
8.16.0	17 / 5	2026-04-02
8.15.5	17 / 5	2026-03-26
8.15.4	17 / 5	2026-03-25
8.15.3	17 / 5	2026-03-18
8.15.2	17 / 5	2026-03-11
8.15.1	17 / 5	2026-02-18
8.15.0	17 / 5	2026-02-06
8.14.0	17 / 5	2026-02-05
8.13.1	17 / 5	2026-01-28
8.13.0	17 / 5	2026-01-23
8.12.1	17 / 5	2026-01-21
8.12.0	17 / 5	2026-01-12
8.11.0	17 / 5	2025-12-23
8.10.0	17 / 5	2025-12-12
8.9.5	17 / 5	2025-12-04
8.9.4	17 / 5	2025-11-28
8.9.3	17 / 5	2025-11-21
8.9.2	17 / 5	2025-11-21
8.9.1	17 / 5	2025-11-20
8.9.0	17 / 5	2025-11-19
8.8.1	17 / 5	2025-11-17
8.8.0	17 / 5	2025-10-30
7.17.0	16 / 4	2026-06-04
7.16.5	16 / 4	2026-05-29
7.16.4	16 / 4	2026-05-27
7.16.3	16 / 4	2026-05-22
7.16.2	16 / 4	2026-05-22
7.16.1	16 / 4	2026-05-14
7.16.0	16 / 4	2026-05-08
7.15.0	16 / 4	2026-03-23
7.14.1	16 / 4	2026-03-09
7.14.0	16 / 4	2026-02-27
7.13.0	16 / 4	2026-02-21
7.12.0	16 / 4	2026-02-19
7.11.12	16 / 4	2026-02-17
7.11.11	16 / 4	2026-02-11
7.11.10	16 / 4	2026-02-05
7.11.9	16 / 4	2026-01-12
7.11.8	16 / 4	2025-12-31
7.11.7	16 / 4	2025-12-05
7.11.6	16 / 4	2025-11-27
7.11.5	16 / 4	2025-11-11
6.6.3	16 / 1	2026-04-07
6.6.2	16 / 1	2026-03-05
6.6.1	16 / 1	2026-02-12
6.6.0	16 / 1	2025-11-18
6.5.3	16 / 1	2025-11-17
6.5.2	16 / 1	2025-11-12
6.5.1	16 / 1	2025-11-06

v8.21.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.21.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.21.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.21.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.21.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.21.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.21.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.21.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.20.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.19.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.18.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.18.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.18.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.18.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.17.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.17.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.17.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.16.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.16.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.15.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.15.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.15.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.15.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.15.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.15.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.14.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.13.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.13.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.12.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.12.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.11.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v8.10.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v8.9.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v8.9.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v8.9.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.9.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.9.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.9.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.8.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v8.8.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.17.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.16.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.16.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.16.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.16.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.16.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.16.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.15.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.14.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.14.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.13.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.12.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.11.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.11.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.11.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.11.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v7.11.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.11.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.11.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v7.11.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.6.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.6.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v6.6.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v6.6.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v6.5.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v6.5.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v6.5.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.