@react-email/tailwind
8
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
zenorochabukinoshitagabrielmfernjopcmelo
Keywords
reactemailtailwind
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | net-exec-file:dist/index.cjs | AI (source-diff): dist/index.cjs is a standard rolldown bundle; the sample shows only CommonJS runtime boilerplate, not malicious network+exec. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from bukinoshita to GitHub Actions CI/CD is consistent with the resend/react-email repo automating npm publishes with SLSA attestation. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy followed by CI/CD-attested publish from the official repo is consistent with a legitimate release cadence change, not a takeover. | ai |