@po-ui/ng-storage
PO UI - Storage
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Mature PO UI package; no provenance is consistent across all its versions and is not a risk indicator here. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a standard Angular/TypeScript runtime implicit dependency; stable false positive for this package. | ai |
Versions (showing 51 of 61)
| Version | Deps | Published |
|---|---|---|
| 21.25.0 | 5 / 0 | |
| 21.24.0 | 5 / 0 | |
| 21.23.1 | 5 / 0 | |
| 21.23.0 | 5 / 0 | |
| 21.22.0 | 5 / 0 | |
| 21.21.0 | 5 / 0 | |
| 21.20.0 | 5 / 0 | |
| 21.19.0 | 5 / 0 | |
| 21.18.0 | 5 / 0 | |
| 21.17.0 | 5 / 0 | |
| 21.16.0 | 5 / 0 | |
| 21.15.0 | 5 / 0 | |
| 21.14.0 | 5 / 0 | |
| 21.13.1 | 5 / 0 | |
| 21.13.0 | 5 / 0 | |
| 21.12.0 | 5 / 0 | |
| 21.11.0 | 5 / 0 | |
| 21.10.0 | 5 / 0 | |
| 21.9.0 | 5 / 0 | |
| 21.8.0 | 5 / 0 | |
| 21.7.0 | 5 / 0 | |
| 21.6.0 | 5 / 0 | |
| 21.5.0 | 5 / 0 | |
| 21.4.0 | 5 / 0 | |
| 21.3.0 | 5 / 0 | |
| 21.2.0 | 5 / 0 | |
| 21.1.0 | 5 / 0 | |
| 21.0.1 | 5 / 0 | |
| 21.0.0 | 5 / 0 | |
| 20.13.1 | 5 / 0 | |
| 20.13.0 | 5 / 0 | |
| 20.12.0 | 5 / 0 | |
| 20.11.0 | 5 / 0 | |
| 20.10.0 | 5 / 0 | |
| 20.9.0 | 5 / 0 | |
| 20.8.0 | 5 / 0 | |
| 19.39.19 | 5 / 0 | |
| 19.39.18 | 5 / 0 | |
| 19.39.17 | 5 / 0 | |
| 19.39.16 | 5 / 0 | |
| 19.39.15 | 5 / 0 | |
| 19.39.14 | 5 / 0 | |
| 19.39.13 | 5 / 0 | |
| 19.39.12 | 5 / 0 | |
| 19.39.11 | 5 / 0 | |
| 19.39.10 | 5 / 0 | |
| 19.39.9 | 5 / 0 | |
| 19.39.8 | 5 / 0 | |
| 19.39.7 | 5 / 0 | |
| 19.39.6 | 5 / 0 | |
| 19.39.5 | 5 / 0 |
v21.25.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.24.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.23.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v21.23.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.19
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.18
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v19.39.17
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.