← Home

@shoplflow/templates

npm Repository Homepage
51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

jason-jeongdaisy.kimshoplworks-devkim-777kevin.jeon

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@shoplflow/utils AI (phantom-deps): Internal org dependency; re-exported or used in config. ai
phantom-deps phantom-dep:react-dom AI (phantom-deps): Peer dep referenced in config; stable pattern for this component library. ai
phantom-deps phantom-dep:framer-motion AI (phantom-deps): Component library config reference; stable false positive for this package. ai
phantom-deps phantom-dep:simplebar-react AI (phantom-deps): Component library config reference; stable false positive for this package. ai
phantom-deps phantom-dep:react-datepicker AI (phantom-deps): Component library config reference; stable false positive for this package. ai
phantom-deps phantom-dep:date-fns AI (phantom-deps): Component library; deps referenced in config/re-exports, not direct imports. Stable pattern for this package. ai
phantom-deps phantom-dep:@floating-ui/react AI (phantom-deps): Component library config reference; stable false positive for this package. ai
phantom-deps phantom-dep:@floating-ui/react-dom AI (phantom-deps): Component library config reference; stable false positive for this package. ai
phantom-deps phantom-dep:@shoplflow/hada-assets AI (phantom-deps): Same-org sibling package; stable false positive for this monorepo package. ai
phantom-deps phantom-dep:@floating-ui/core AI (phantom-deps): Component library config reference; stable false positive for this package. ai

Versions (showing 51 of 169)

View all versions
Version Deps Published
0.2.54 19 / 27
0.2.53 19 / 27
0.2.52 19 / 27
0.2.51 19 / 27
0.2.50 19 / 27
0.2.49 19 / 27
0.2.48 19 / 27
0.2.47 19 / 27
0.2.46 16 / 27
0.2.45 16 / 27
0.2.44 16 / 27
0.2.43 16 / 27
0.2.42 16 / 27
0.2.41 16 / 27
0.2.40 16 / 27
0.2.39 16 / 27
0.2.38 16 / 27
0.2.37 16 / 27
0.2.36 16 / 27
0.2.35 16 / 27
0.2.34 16 / 27
0.2.33 16 / 27
0.2.32 16 / 27
0.2.31 16 / 27
0.2.30 16 / 27
0.2.29 16 / 27
0.2.28 16 / 27
0.2.27 16 / 27
0.2.26 16 / 27
0.2.24 16 / 27
0.2.22 16 / 27
0.2.20 16 / 27
0.2.19 16 / 27
0.2.18 16 / 27
0.2.17 16 / 27
0.2.16 16 / 27
0.2.15 16 / 27
0.2.14 16 / 28
0.2.13 16 / 28
0.2.12 16 / 28
0.2.11 16 / 28
0.2.10 16 / 28
0.2.9 16 / 28
0.2.8 16 / 28
0.2.7 16 / 28
0.2.6 16 / 28
0.2.5 16 / 28
0.2.4 16 / 28
0.2.3 16 / 28
0.2.2 16 / 28
0.2.1 16 / 27

v0.2.54

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.53

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.52

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.51

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.50

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.49

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.48

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.47

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.46

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.45

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.44

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.43

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.