← Home

@qualcomm-ui/react-core

npm Repository
41
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

mynameistechnorbowerqcom

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): SLSA provenance attestation present; missing gitHead is a CI config change, not a supply-chain risk for this package. ai
source-diff obfuscated-file:dist/file-upload/index.js AI (source-diff): Standard minified/bundled React output; readable imports and component logic confirm no obfuscation. ai
phantom-deps phantom-dep:react-remove-scroll AI (phantom-deps): react-remove-scroll is a declared runtime dependency in package.json; phantom-dep heuristic false positive for this package. ai
bogus-package bogus-package AI (bogus-package): Corporate UI library in a monorepo; sparse README and no keywords are expected for internal/scoped packages. ai
license uncommon-license:BSD-3-Clause-Clear AI (license): BSD-3-Clause-Clear is a known permissive license variant used by Qualcomm; stable for this package. ai

Versions (showing 41 of 41)

Version Deps Published
1.5.7 0 / 0
1.5.6 0 / 0
1.5.5 0 / 0
1.5.4 0 / 0
1.5.3 0 / 0
1.5.2 0 / 0
1.5.1 0 / 0
1.5.0 0 / 0
1.4.7 0 / 0
1.4.6 0 / 0
1.4.5 0 / 0
1.4.4 0 / 0
1.4.3 0 / 0
1.4.2 0 / 0
1.4.1 0 / 0
1.4.0 0 / 0
1.3.5 0 / 0
1.3.4 0 / 0
1.3.3 0 / 0
1.3.2 0 / 0
1.3.1 0 / 0
1.3.0 0 / 0
1.2.1 0 / 0
1.2.0 0 / 0
1.1.3 0 / 0
1.1.2 0 / 0
1.1.1 0 / 0
1.1.0 0 / 0
1.0.12 0 / 0
1.0.11 0 / 0
1.0.10 0 / 0
1.0.9 0 / 0
1.0.8 0 / 0
1.0.7 0 / 0
1.0.6 0 / 0
1.0.5 0 / 0
1.0.4 1 / 0
1.0.3 1 / 0
1.0.2 1 / 0
1.0.1 1 / 0
1.0.0 1 / 0

v1.5.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.