@reach/popover
Render a portal positioned relative to another element.
44
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ryanflorencemjacksonchancestricklandblainekasten
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| email-domain | unclaimed-email:ryanflorence | AI (email-domain): The '@ryanflorence' value in the author field is a Twitter-style handle, not a real email address. No actual email domain risk exists for this package. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): mjackson (Michael Jackson) is the known co-maintainer of the Reach UI project alongside Ryan Florence; this is a legitimate long-standing co-maintainer relationship. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): The @reach/* package family uses 0.0.0 as a legitimate initial version pattern; this is not indicative of malicious intent for this well-established publisher. | ai | |
| bogus-package | bogus-package | AI (bogus-package): chancestrickland is a well-established publisher of the @reach scope with 1781 approvals; spam flag is a false positive. | ai | |
| provenance | no-provenance | AI (provenance): @reach packages predate Sigstore provenance; absence is expected for this ecosystem. | ai | |
| provenance | publisher-changed | AI (provenance): mjackson (Matt Jackson, React Training) is the original author of the @reach/* suite; this publisher change is a documented, legitimate maintainer transition within the project. | ai |
Versions (showing 44 of 44)
| Version | Deps | Published |
|---|---|---|
| 0.18.0 | 5 / 6 | |
| 0.17.0 | 5 / 2 | |
| 0.16.2 | 5 / 2 | |
| 0.16.0 | 5 / 2 | |
| 0.15.3 | 5 / 2 | |
| 0.15.2 | 5 / 2 | |
| 0.15.0 | 5 / 2 | |
| 0.14.0 | 5 / 2 | |
| 0.13.2 | 5 / 2 | |
| 0.13.1 | 5 / 2 | |
| 0.13.0 | 5 / 0 | |
| 0.12.1 | 5 / 0 | |
| 0.12.0 | 5 / 0 | |
| 0.11.2 | 5 / 0 | |
| 0.11.1 | 5 / 0 | |
| 0.11.0 | 5 / 0 | |
| 0.10.5 | 5 / 0 | |
| 0.10.4 | 5 / 0 | |
| 0.10.3 | 5 / 0 | |
| 0.10.2 | 5 / 0 | |
| 0.10.1 | 5 / 0 | |
| 0.10.0 | 5 / 0 | |
| 0.9.0 | 5 / 0 | |
| 0.8.6 | 5 / 0 | |
| 0.8.5 | 5 / 0 | |
| 0.8.4 | 5 / 0 | |
| 0.8.3 | 5 / 0 | |
| 0.8.2 | 5 / 0 | |
| 0.8.0 | 4 / 0 | |
| 0.7.4 | 4 / 0 | |
| 0.7.3 | 4 / 0 | |
| 0.7.2 | 4 / 0 | |
| 0.7.1 | 4 / 0 | |
| 0.7.0 | 4 / 0 | |
| 0.6.4 | 4 / 0 | |
| 0.6.2 | 4 / 0 | |
| 0.6.1 | 4 / 0 | |
| 0.5.0 | 4 / 0 | |
| 0.4.0 | 4 / 0 | |
| 0.3.0 | 4 / 0 | |
| 0.1.0 | 4 / 0 | |
| 0.0.2 | 4 / 0 | |
| 0.0.1 | 3 / 0 | |
| 0.0.0 | 3 / 0 |