@po-ui/ng-code-editor
PO UI - Code Editor
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): Publisher pouidev has strong approval track record; org-level team change for established po-ui package. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Bulk removal consistent with org restructuring, not a hostile takeover; no code changes detected. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Established package with 380 versions; dormancy followed by org-level team change is consistent with normal maintenance cycles. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit Angular/TypeScript runtime dep; not directly imported by design. | ai | |
| phantom-deps | phantom-dep:monaco-editor | AI (phantom-deps): monaco-editor is a peer/config dependency for the code editor component; indirect usage is expected. | ai | |
| phantom-deps | phantom-dep:core-js | AI (phantom-deps): core-js is a standard polyfill used implicitly by Angular build toolchain. | ai | |
| phantom-deps | phantom-dep:intl | AI (phantom-deps): intl is referenced in config files as a polyfill; not directly imported by design. | ai |
Versions (showing 51 of 61)
| Version | Deps | Published |
|---|---|---|
| 21.25.0 | 6 / 0 | |
| 21.24.0 | 6 / 0 | |
| 21.23.1 | 6 / 0 | |
| 21.23.0 | 6 / 0 | |
| 21.22.0 | 6 / 0 | |
| 21.21.0 | 6 / 0 | |
| 21.20.0 | 6 / 0 | |
| 21.19.0 | 6 / 0 | |
| 21.18.0 | 6 / 0 | |
| 21.17.0 | 6 / 0 | |
| 21.16.0 | 6 / 0 | |
| 21.15.0 | 6 / 0 | |
| 21.14.0 | 6 / 0 | |
| 21.13.1 | 6 / 0 | |
| 21.13.0 | 6 / 0 | |
| 21.12.0 | 6 / 0 | |
| 21.11.0 | 6 / 0 | |
| 21.10.0 | 6 / 0 | |
| 21.9.0 | 6 / 0 | |
| 21.8.0 | 6 / 0 | |
| 21.7.0 | 6 / 0 | |
| 21.6.0 | 6 / 0 | |
| 21.5.0 | 6 / 0 | |
| 21.4.0 | 6 / 0 | |
| 21.3.0 | 6 / 0 | |
| 21.2.0 | 6 / 0 | |
| 21.1.0 | 6 / 0 | |
| 21.0.1 | 6 / 0 | |
| 21.0.0 | 6 / 0 | |
| 20.13.1 | 6 / 0 | |
| 20.13.0 | 6 / 0 | |
| 20.12.0 | 6 / 0 | |
| 20.11.0 | 6 / 0 | |
| 20.10.0 | 6 / 0 | |
| 20.9.0 | 6 / 0 | |
| 20.8.0 | 6 / 0 | |
| 19.39.19 | 6 / 0 | |
| 19.39.18 | 6 / 0 | |
| 19.39.17 | 6 / 0 | |
| 19.39.16 | 6 / 0 | |
| 19.39.15 | 6 / 0 | |
| 19.39.14 | 6 / 0 | |
| 19.39.13 | 6 / 0 | |
| 19.39.12 | 6 / 0 | |
| 19.39.11 | 6 / 0 | |
| 19.39.10 | 6 / 0 | |
| 19.39.9 | 6 / 0 | |
| 19.39.8 | 6 / 0 | |
| 19.39.7 | 6 / 0 | |
| 19.39.6 | 6 / 0 | |
| 19.39.5 | 6 / 0 |
v21.25.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.24.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.23.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.23.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.