@po-ui/ng-components
PO UI - Components
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:types/po-ui-ng-components.d.ts | AI (source-diff): Large bundled .d.ts type declarations, not obfuscated executable code. | ai | |
| phantom-deps | phantom-dep:echarts | AI (phantom-deps): echarts is a known optional chart dep in this Angular library; lazy-loaded pattern means no direct import. | ai | |
| phantom-deps | phantom-dep:driver.js | AI (phantom-deps): driver.js is a legitimate tour library; phantom-dep likely reflects Angular DI/lazy usage pattern. | ai | |
| phantom-deps | phantom-dep:@po-ui/style | AI (phantom-deps): Same-org style package; consumed as a CSS/asset dep, not a JS import. | ai |
Versions (showing 61 of 61)
| Version | Deps | Published |
|---|---|---|
| 21.25.0 | 6 / 0 | |
| 21.24.0 | 6 / 0 | |
| 21.23.1 | 6 / 0 | |
| 21.23.0 | 6 / 0 | |
| 21.22.0 | 6 / 0 | |
| 21.21.0 | 6 / 0 | |
| 21.20.0 | 6 / 0 | |
| 21.19.0 | 6 / 0 | |
| 21.18.0 | 6 / 0 | |
| 21.17.0 | 5 / 0 | |
| 21.16.0 | 5 / 0 | |
| 21.15.0 | 5 / 0 | |
| 21.14.0 | 5 / 0 | |
| 21.13.1 | 5 / 0 | |
| 21.13.0 | 5 / 0 | |
| 21.12.0 | 5 / 0 | |
| 21.11.0 | 5 / 0 | |
| 21.10.0 | 5 / 0 | |
| 21.9.0 | 5 / 0 | |
| 21.8.0 | 5 / 0 | |
| 21.7.0 | 5 / 0 | |
| 21.6.0 | 5 / 0 | |
| 21.5.0 | 5 / 0 | |
| 21.4.0 | 5 / 0 | |
| 21.3.0 | 5 / 0 | |
| 21.2.0 | 5 / 0 | |
| 21.1.0 | 5 / 0 | |
| 21.0.1 | 5 / 0 | |
| 21.0.0 | 5 / 0 | |
| 20.13.1 | 5 / 0 | |
| 20.13.0 | 5 / 0 | |
| 20.12.0 | 5 / 0 | |
| 20.11.0 | 5 / 0 | |
| 20.10.0 | 5 / 0 | |
| 20.9.0 | 5 / 0 | |
| 20.8.0 | 5 / 0 | |
| 19.39.19 | 5 / 0 | |
| 19.39.18 | 5 / 0 | |
| 19.39.17 | 5 / 0 | |
| 19.39.16 | 5 / 0 | |
| 19.39.15 | 5 / 0 | |
| 19.39.14 | 5 / 0 | |
| 19.39.13 | 5 / 0 | |
| 19.39.12 | 5 / 0 | |
| 19.39.11 | 5 / 0 | |
| 19.39.10 | 5 / 0 | |
| 19.39.9 | 5 / 0 | |
| 19.39.8 | 5 / 0 | |
| 19.39.7 | 5 / 0 | |
| 19.39.6 | 5 / 0 | |
| 19.39.5 | 5 / 0 | |
| 19.39.4 | 5 / 0 | |
| 19.39.3 | 5 / 0 | |
| 19.39.2 | 5 / 0 | |
| 19.39.1 | 5 / 0 | |
| 19.39.0 | 5 / 0 | |
| 19.38.0 | 5 / 0 | |
| 19.37.0 | 5 / 0 | |
| 19.36.0 | 5 / 0 | |
| 19.35.0 | 5 / 0 | |
| 19.34.0 | 5 / 0 |
v21.25.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.24.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.23.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.23.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.7.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.6.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.5.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.4.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.3.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.2.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.1.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.0.1
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.0.0
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v20.13.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v20.13.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v20.12.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v20.11.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v20.10.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v20.9.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v20.8.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v19.39.19
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.18
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.17
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.38.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.37.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.36.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.35.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.34.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.