← Home

@radix-ui/react-toolbar

View docs [here](https://radix-ui.com/primitives/docs/components/toolbar).

44
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

hadihallakchancestricklandmark-workosnpm-workos

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance no-provenance AI (provenance): Radix UI primitives are a well-established, widely-downloaded package family. Lack of Sigstore provenance is a process gap, not a security risk for this trusted publisher. ai
provenance publisher-changed AI (provenance): vladmoroz is a known Radix UI core maintainer; transition from benoitgrelard is a legitimate team handoff within the same org. ai
npm-metadata no-description AI (npm-metadata): Radix UI monorepo sub-packages commonly omit descriptions; not indicative of malice for this established package. ai
bogus-package bogus-package AI (bogus-package): Radix UI sub-package with 6.8M weekly downloads and 1891 days of history. Spam signals are false positives: known maintainer, legitimate monorepo component, short README is standard for this package family. ai

Versions (showing 44 of 44)

Show 34 prereleases
Version Deps Published
1.1.19 7 / 7
1.1.18 7 / 7
1.1.17 7 / 7
1.1.16 7 / 7
1.1.15 7 / 7
1.1.14 7 / 7
1.1.13 7 / 7
1.1.12 7 / 7
1.1.11 7 / 9
1.1.10 7 / 9
1.1.9 7 / 9
1.1.8 7 / 9
1.1.7 7 / 9
1.1.6 7 / 9
1.1.5 7 / 9
1.1.4 7 / 9
1.1.3 7 / 8
1.1.2 7 / 8
1.1.1 7 / 0
1.1.0 7 / 0
1.0.4 8 / 0
1.0.3 8 / 0
1.0.2 8 / 0
1.0.1 8 / 0
1.0.0 8 / 0
0.1.5 7 / 0
0.1.4 7 / 0
0.1.3 7 / 0
0.1.2 7 / 0
0.1.1 6 / 0
0.1.0 6 / 0
0.0.14 8 / 0
0.0.13 8 / 0
0.0.12 8 / 0
0.0.11 8 / 0
0.0.10 8 / 0
0.0.9 9 / 0
0.0.8 9 / 0
0.0.7 9 / 0
0.0.6 9 / 0
0.0.4 8 / 0
0.0.3 8 / 0
0.0.2 8 / 0
0.0.1 6 / 0

v1.1.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.1.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.1.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.1.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.1.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.1.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.