@plumile/ui
Shared React UI primitives and theme for Kronex applications
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ohardy
Keywords
reactuivanilla-extractdesign-systemtypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:lib/esm/src-BPX_89p7.js | AI (source-diff): Minified Vite bundle of React/vanilla-extract/nivo UI code; readable imports confirm legitimate build output. | ai | |
| source-diff | obfuscated-file:lib/esm/src-DJ_3P36n.js | AI (source-diff): Minified Vite bundle chunk; imports are clearly from react, @vanilla-extract, @nivo/line — all declared dependencies. | ai | |
| source-diff | obfuscated-file:lib/esm/node_modules/mermaid/dist/chunks/mermaid.core/flowDiagram-I6XJVG4X.js | AI (source-diff): Standard minified mermaid.js build artifact from declared mermaid dependency; no malicious indicators. | ai | |
| source-diff | obfuscated-file:lib/esm/node_modules/mermaid/dist/chunks/mermaid.core/c4Diagram-AAUBKEIU.js | AI (source-diff): Standard minified mermaid.js build artifact from declared mermaid dependency; no malicious indicators. | ai | |
| source-diff | obfuscated-file:lib/esm/flowDiagram-DWJPFMVM-BkxIhdyA.js | AI (source-diff): Standard Vite ESM bundle of mermaid flowDiagram chunk; readable code with source map, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:lib/esm/src-CUtn9cbu.js | AI (source-diff): Standard Vite ESM bundle of UI components; readable React/vanilla-extract code, not malicious obfuscation. | ai | |
| phantom-deps | phantom-dep:@vanilla-extract/sprinkles | AI (phantom-deps): Referenced in config files; consistent with optional UI component library pattern. | ai | |
| phantom-deps | phantom-dep:@dnd-kit/core | AI (phantom-deps): Newly added runtime dep referenced in config; stable false positive. | ai | |
| phantom-deps | phantom-dep:@dnd-kit/sortable | AI (phantom-deps): Newly added runtime dep referenced in config; stable false positive. | ai | |
| phantom-deps | phantom-dep:@dnd-kit/utilities | AI (phantom-deps): Newly added runtime dep referenced in config; stable false positive. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped UI library; no relation to 'pg' postgres client. | ai | |
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped UI library @plumile/ui; Levenshtein match to 'uuid' is coincidental, not a typosquat. | ai | |
| phantom-deps | phantom-dep:react-shiki | AI (phantom-deps): react-shiki is declared as a dependency and referenced in config; phantom-dep heuristic misfires here. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit TypeScript runtime dependency; stable false positive. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped UI library; no relation to 'yup'. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped UI library; no relation to 'joi'. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped UI library; no relation to 'qs'. | ai | |
| phantom-deps | phantom-dep:mermaid | AI (phantom-deps): mermaid is declared as a dependency and referenced in config; phantom-dep heuristic misfires here. | ai | |
| semgrep | semgrep:dll-hijacking-commands | AI (semgrep): Fires on frozen JSON TextMate grammar data inside a syntax-highlighter bundle, not actual DLL hijacking commands. | ai |
Versions (showing 51 of 105)
| Version | Deps | Published |
|---|---|---|
| 0.1.188 | 12 / 9 | |
| 0.1.187 | 12 / 9 | |
| 0.1.185 | 12 / 9 | |
| 0.1.184 | 12 / 9 | |
| 0.1.183 | 12 / 9 | |
| 0.1.182 | 12 / 9 | |
| 0.1.181 | 12 / 9 | |
| 0.1.179 | 12 / 9 | |
| 0.1.178 | 12 / 9 | |
| 0.1.177 | 12 / 9 | |
| 0.1.173 | 12 / 9 | |
| 0.1.172 | 12 / 9 | |
| 0.1.171 | 12 / 9 | |
| 0.1.170 | 12 / 9 | |
| 0.1.169 | 12 / 9 | |
| 0.1.168 | 12 / 9 | |
| 0.1.167 | 12 / 9 | |
| 0.1.166 | 12 / 9 | |
| 0.1.165 | 12 / 9 | |
| 0.1.164 | 12 / 9 | |
| 0.1.163 | 12 / 9 | |
| 0.1.162 | 12 / 9 | |
| 0.1.161 | 12 / 9 | |
| 0.1.160 | 12 / 9 | |
| 0.1.159 | 12 / 9 | |
| 0.1.158 | 12 / 9 | |
| 0.1.157 | 12 / 9 | |
| 0.1.156 | 12 / 9 | |
| 0.1.154 | 12 / 9 | |
| 0.1.153 | 12 / 9 | |
| 0.1.152 | 12 / 9 | |
| 0.1.151 | 12 / 9 | |
| 0.1.150 | 12 / 9 | |
| 0.1.147 | 12 / 9 | |
| 0.1.146 | 12 / 9 | |
| 0.1.145 | 12 / 9 | |
| 0.1.144 | 12 / 9 | |
| 0.1.143 | 12 / 9 | |
| 0.1.142 | 12 / 9 | |
| 0.1.140 | 12 / 9 | |
| 0.1.134 | 12 / 9 | |
| 0.1.132 | 12 / 9 | |
| 0.1.131 | 12 / 9 | |
| 0.1.130 | 12 / 9 | |
| 0.1.125 | 12 / 9 | |
| 0.1.122 | 12 / 9 | |
| 0.1.120 | 12 / 9 | |
| 0.1.117 | 9 / 9 | |
| 0.1.116 | 9 / 9 | |
| 0.1.115 | 9 / 9 | |
| 0.1.114 | 9 / 9 |