@pie-element/passage
Renders passage content.
10
Versions
ISC
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
ed.eustaceelodszoposlakatosandreievaneuschilleniousandreeapescarcarlacosteaiacoshoriajustinheuer
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | dormant-publish | AI (publish-pattern): SLSA provenance attestation confirms legitimate CI/CD publish; no material changes from prior version. | ai | |
| phantom-deps | phantom-dep:@emotion/react | AI (phantom-deps): Declared as a runtime dep; phantom-dep heuristic fires on config-only references, stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/style | AI (phantom-deps): Same pattern as @emotion/react; config-only reference, stable false positive for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Part of a large, long-lived monorepo (pie-framework/pie-elements); sparse README is typical for internal element packages. | ai |
Versions (showing 10 of 10)
| Version | Deps | Published |
|---|---|---|
| 7.3.1 | 10 / 0 | |
| 7.3.0 | 10 / 0 | |
| 7.2.2 | 10 / 0 | |
| 7.2.1 | 10 / 0 | |
| 7.2.0 | 10 / 0 | |
| 7.1.2 | 10 / 0 | |
| 7.1.1 | 10 / 0 | |
| 7.0.1 | 10 / 0 | |
| 7.0.0 | 10 / 0 | |
| 5.3.3 | 8 / 0 |
v7.3.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v7.3.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.