@pega/cosmos-react-test-utils
9
Versions
SEE LICENSE IN LICENSE
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
baipcandrewlewis2duddrcricmarsssowersbybob-difronzofeenr-pegacpmotionpega-cosmosghosa4sharv12tumms2021389vrspegapatilvishalnikhilparmar
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | large-new-source-files | AI (source-diff): Major version bump (v7→v8) with expanded test utilities; new source files are expected. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): All new deps are well-known testing/utility libraries appropriate for a test-utils package. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Pega org package with long history; maintainer rotation is normal for large org packages. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): High-velocity monorepo; rapid successive publishes are normal for this publisher's release cadence. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established Pega scoped package; missing metadata is a consistent pattern across the family, not a spam indicator. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Consistent across @pega/cosmos-react-* packages; not indicative of malicious intent. | ai | |
| phantom-deps | phantom-dep:@types/jest | AI (phantom-deps): Framework-scoped type package; loaded by convention in Jest projects. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Framework-scoped type package; loaded by convention in React projects. | ai | |
| phantom-deps | phantom-dep:polished | AI (phantom-deps): CSS utility used in config/setup files; stable false positive for this test-utils package. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): Peer/test dependency for React test utilities; referenced in config, not directly imported. | ai | |
| phantom-deps | phantom-dep:@types/react-dom | AI (phantom-deps): Framework-scoped type package; loaded by convention in React projects. | ai | |
| phantom-deps | phantom-dep:jest-styled-components | AI (phantom-deps): Test framework integration loaded by convention; stable false positive for this package. | ai |