@pie-lib/mask-markup
13
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
ed.eustacelakatosandreichilleniousandreeapescarcarlacosteaiacoshoriajustinheuer
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| bogus-package | bogus-package | AI (bogus-package): Missing metadata is a known pattern across the @pie-lib monorepo, not a spam indicator. | ai | |
| phantom-deps | phantom-dep:slate-react | AI (phantom-deps): Slate ecosystem peer dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:slate-prop-types | AI (phantom-deps): Slate ecosystem peer dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:react-dnd-html5-backend | AI (phantom-deps): DnD peer dep declared for config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:slate | AI (phantom-deps): Slate ecosystem peer deps declared for config/type purposes; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:immutable | AI (phantom-deps): Declared as peer/config dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/react | AI (phantom-deps): Emotion packages are runtime deps for MUI-based component; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:@emotion/style | AI (phantom-deps): Emotion style dep used via MUI/config; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): react-dom is a legitimate peer/runtime dep in a React component library; phantom-dep heuristic false positive. | ai |
Versions (showing 13 of 13)
| Version | Deps | Published |
|---|---|---|
| 3.0.12 | 15 / 0 | |
| 3.0.11 | 15 / 0 | |
| 3.0.10 | 15 / 0 | |
| 3.0.9 | 15 / 0 | |
| 3.0.8 | 15 / 0 | |
| 3.0.7 | 15 / 0 | |
| 3.0.6 | 15 / 0 | |
| 3.0.5 | 15 / 0 | |
| 3.0.4 | 15 / 0 | |
| 3.0.3 | 15 / 0 | |
| 3.0.1 | 15 / 0 | |
| 3.0.0 | 15 / 0 | |
| 1.33.2 | 19 / 0 |
v3.0.12
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.0.11
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.0.10
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.