← Home

@radix-ui/react-label

npm Repository Homepage

View docs [here](https://radix-ui.com/primitives/docs/utilities/label).

62
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

hadihallakchancestricklandmark-workosnpm-workos

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): Build-env change on established Radix package; no behavioral risk. ai
bogus-package bogus-package AI (bogus-package): Radix UI primitives intentionally have minimal READMEs/descriptions; stable FP. ai
provenance publisher-changed AI (provenance): chancestrickland is a long-standing WorkOS/Radix UI contributor with strong approval history; publisher change reflects legitimate internal team transition, not compromise. ai
maintainer-change maintainer-added AI (maintainer-change): New maintainers chancestrickland and mark-workos are established WorkOS team members; addition is consistent with legitimate org restructuring. ai
maintainer-change maintainer-removed AI (maintainer-change): Removed maintainers reflect the same WorkOS team transition; no evidence of hostile takeover given clean package content and repo metadata. ai
npm-metadata no-description AI (npm-metadata): Radix UI packages consistently omit descriptions in package.json; this is a stable pattern across the entire primitives monorepo, not a malicious signal. ai

Versions (showing 62 of 62)

Hide prereleases
Version Deps Published
2.1.15 1 / 7
2.1.14 1 / 7
2.1.13 1 / 7
2.1.12 1 / 7
2.1.11 1 / 7
2.1.10 1 / 7
2.1.9 1 / 7
2.1.8 1 / 9
2.1.7 1 / 9
2.1.6 1 / 9
2.1.5 1 / 9
2.1.4 1 / 9
2.1.3 1 / 8
2.1.2 1 / 8
2.1.1 1 / 0
2.1.0 1 / 0
2.0.2 2 / 0
2.0.1 2 / 0
2.0.0 2 / 0
1.0.0 5 / 0
0.1.5 5 / 0
0.1.4 5 / 0
0.1.3 5 / 0
0.1.2 5 / 0
0.1.1 5 / 0
0.1.0 4 / 0
0.0.15 5 / 0
0.0.14 5 / 0
0.0.13 5 / 0
0.0.12 5 / 0
0.0.11 5 / 0
0.0.10 5 / 0
0.0.9 5 / 0
0.0.8 5 / 0
0.0.7 5 / 0
0.0.6 4 / 0
0.0.5 4 / 0
0.0.4 4 / 0
0.0.3 4 / 0
0.0.2 4 / 0
0.0.1 3 / 1
2.1.8-rc.1761760880074 1 / 9
2.1.8-rc.1761757765388 1 / 9
2.1.8-rc.1761752560860 1 / 9
2.1.8-rc.1761750294484 1 / 9
2.1.8-rc.1761750045307 1 / 9
2.1.8-rc.1761621280215 1 / 9
2.1.8-rc.1761620575619 1 / 9
2.1.8-rc.1761619701743 1 / 9
2.1.8-rc.1761615925003 1 / 9
2.1.8-rc.1761614930803 1 / 9
2.1.8-rc.1761614469962 1 / 9
2.1.8-rc.1761582029795 1 / 9
2.1.7-rc.1747678980544 1 / 9
2.1.7-rc.1746560904918 1 / 9
2.1.5-rc.1746466567086 1 / 9
2.1.5-rc.1746075822931 1 / 9
2.1.5-rc.1746053194630 1 / 9
2.1.5-rc.1746044551800 1 / 9
2.1.5-rc.1745972185559 1 / 9
2.1.5-rc.1745439717073 1 / 9
2.1.5-rc.1745345395380 1 / 9

v2.1.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.4

2 findings
HIGH Missing gitHead — previous versions had it provenance

This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: chancestrickland.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.