@rpcbase/ui
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:uuid | AI (typosquat): Scoped org package @rpcbase/ui; not a typosquat of uuid. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped org package @rpcbase/ui; not a typosquat of pg. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped org package @rpcbase/ui; not a typosquat of qs. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped org package @rpcbase/ui; not a typosquat of joi. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped org package @rpcbase/ui; not a typosquat of yup. | ai | |
| phantom-deps | phantom-dep:sonner | AI (phantom-deps): UI component library; deps may be used indirectly via re-exports or config. | ai | |
| phantom-deps | phantom-dep:blurhash | AI (phantom-deps): UI component library; deps may be used indirectly via re-exports or config. | ai | |
| phantom-deps | phantom-dep:@googlemaps/js-api-loader | AI (phantom-deps): UI component library; deps may be used indirectly via re-exports or config. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-dropdown-menu | AI (phantom-deps): UI component library; deps may be used indirectly via re-exports or config. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-dismissable-layer | AI (phantom-deps): UI component library; deps may be used indirectly via re-exports or config. | ai |
Versions (showing 31 of 131)
| Version | Deps | Published |
|---|---|---|
| 0.59.0 | 7 / 10 | |
| 0.58.0 | 7 / 9 | |
| 0.57.0 | 7 / 9 | |
| 0.56.0 | 7 / 9 | |
| 0.55.0 | 7 / 9 | |
| 0.54.0 | 5 / 9 | |
| 0.53.0 | 5 / 9 | |
| 0.52.0 | 5 / 9 | |
| 0.51.0 | 5 / 9 | |
| 0.50.0 | 5 / 9 | |
| 0.44.0 | 2 / 0 | |
| 0.43.0 | 2 / 0 | |
| 0.42.0 | 2 / 0 | |
| 0.41.0 | 2 / 0 | |
| 0.40.0 | 2 / 0 | |
| 0.39.0 | 2 / 0 | |
| 0.38.0 | 2 / 0 | |
| 0.37.0 | 2 / 0 | |
| 0.36.0 | 2 / 0 | |
| 0.35.0 | 2 / 0 | |
| 0.34.0 | 2 / 0 | |
| 0.33.0 | 2 / 0 | |
| 0.32.0 | 2 / 0 | |
| 0.31.0 | 2 / 0 | |
| 0.30.0 | 2 / 0 | |
| 0.29.0 | 0 / 0 | |
| 0.28.0 | 0 / 0 | |
| 0.27.0 | 0 / 0 | |
| 0.26.0 | 0 / 0 | |
| 0.25.0 | 0 / 0 | |
| 0.24.0 | 0 / 0 |
v0.31.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.30.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.29.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.28.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.27.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.26.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.25.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.24.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.