@sisense/sdk-shared-ui
38
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
moti.sisensetuan.phamcompose-sdk-eng
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): New deps (@emotion/cache, @emotion/react, @emotion/styled, simplebar-react, @rc-component/tooltip) are declared in package.json and are established packages. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large file count reflects bundling MUI+Emotion components; consistent with declared deps expansion. | ai | |
| source-diff | obfuscated-file:dist/Typography-D9h5RwwD.cjs | AI (source-diff): Standard Vite/Rollup minified output for MUI Typography. | ai | |
| source-diff | obfuscated-file:dist/Tooltip-CRxCuNLx.cjs | AI (source-diff): Standard Vite/Rollup minified output for MUI Tooltip. | ai | |
| source-diff | obfuscated-file:dist/TablePagination-B-2AdU-x.cjs | AI (source-diff): Standard Vite/Rollup minified output for MUI TablePagination. | ai | |
| source-diff | obfuscated-file:dist/Menu-CeLnAuxU.cjs | AI (source-diff): Standard Vite/Rollup minified output for Menu component. | ai | |
| source-diff | obfuscated-file:dist/Icon-BmdiZYyc.cjs | AI (source-diff): Standard Vite/Rollup minified output for Icon component. | ai | |
| source-diff | obfuscated-file:dist/Breadcrumbs-COWMgzHt.cjs | AI (source-diff): Standard Vite/Rollup minified output for MUI Breadcrumbs component; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/Dropdown-B6PGOm1j.cjs | AI (source-diff): Standard Vite/Rollup minified output for Dropdown component. | ai | |
| source-diff | obfuscated-file:dist/DEPRECATED_Tooltip-j06rHlbQ.cjs | AI (source-diff): Standard Vite/Rollup minified output for rc-component/tooltip-based DEPRECATED_Tooltip. | ai | |
| source-diff | obfuscated-file:dist/Checkbox-BrJa6rXp.cjs | AI (source-diff): Standard Vite/Rollup minified output for MUI Checkbox. | ai | |
| source-diff | net-exec-file:dist/index.umd.js | AI (source-diff): UMD bundle for React UI library; patterns are standard UMD wrapper + React APIs, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/index-CHH7nhRo.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for package index. | ai | |
| source-diff | obfuscated-file:dist/emotion-cache-provider-CbsuuMnH.js | AI (source-diff): Standard Vite/Rollup minified bundle output for Emotion cache provider ESM. | ai | |
| source-diff | obfuscated-file:dist/Portal-DjzIwZc4.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for MUI Portal. | ai | |
| source-diff | obfuscated-file:dist/Typography-DpSJrSkJ.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for Typography component. | ai | |
| source-diff | obfuscated-file:dist/Tooltip-CvpZynmo.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for Tooltip component. | ai | |
| source-diff | obfuscated-file:dist/TablePagination-B9mPoc_j.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for TablePagination component. | ai | |
| source-diff | obfuscated-file:dist/SvgIcon-DOhrb2-I.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for MUI SvgIcon. | ai | |
| source-diff | obfuscated-file:dist/emotion-cache-provider-BA0VP8z6.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for Emotion cache provider. | ai | |
| source-diff | net-exec-file:dist/Portal-CuOEoTV6.js | AI (source-diff): MUI Portal ESM bundle; patterns are React DOM portal APIs, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/Menu-1NGOC2wt.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for Menu component. | ai | |
| source-diff | obfuscated-file:dist/Icon-MnCGEEQV.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for Icon component. | ai | |
| source-diff | obfuscated-file:dist/Dropdown-C-gB9fcP.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for Dropdown component. | ai | |
| source-diff | obfuscated-file:dist/Breadcrumbs-BPFGyMFx.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for MUI/Emotion React components; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/Button-SdsF1IuR.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for MUI/Emotion React components. | ai | |
| source-diff | net-exec-file:dist/ButtonBase-BFKx2I1_.js | AI (source-diff): MUI ButtonBase ESM bundle; 'network' and 'exec' patterns are React/DOM API calls, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/ButtonBase-_pI6xEeE.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for MUI ButtonBase. | ai | |
| source-diff | obfuscated-file:dist/Checkbox-BsNYaD1B.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for MUI Checkbox. | ai | |
| source-diff | obfuscated-file:dist/CircularProgress-BW3Hjcp9.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for MUI CircularProgress. | ai | |
| source-diff | net-exec-file:dist/Portal-DUw3q8Mq.js | AI (source-diff): ESM build of MUI Portal; no actual network calls or dynamic exec beyond React patterns. | ai | |
| source-diff | obfuscated-file:dist/Breadcrumbs-Da5cnPID.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/Button-RoXZvXZf.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/ButtonBase-CISYuRKV.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | net-exec-file:dist/ButtonBase-UWHDpyst.js | AI (source-diff): ESM build of MUI ButtonBase; no actual network calls or dynamic exec beyond React patterns. | ai | |
| source-diff | obfuscated-file:dist/Checkbox-DpGUO-Li.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/Icon-KwS2TWVq.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/Portal-CtJkkaJ7.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/SvgIcon-DXzFs5aw.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/TablePagination-baLnBUNn.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/Tooltip-Dcsip2Zy.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/Typography-BDMqUlbg.cjs | AI (source-diff): Standard Vite/Rollup minified MUI component bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/emotion-cache-provider-C66nBUtN.cjs | AI (source-diff): Standard Vite/Rollup minified Emotion bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/emotion-cache-provider-CsTOkc-k.js | AI (source-diff): Standard Vite/Rollup minified Emotion bundle; no malicious content. | ai | |
| source-diff | obfuscated-file:dist/Tooltip-BjyR1mIC.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/TablePagination-CNwjJIdB.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | net-exec-file:dist/ButtonBase-4TqAVSBf.js | AI (source-diff): MUI ButtonBase component bundle; network/exec heuristic is a false positive on React event handling code. | ai | |
| source-diff | obfuscated-file:dist/Button-CvkAcTyS.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/Breadcrumbs-B-OHBus7.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/emotion-cache-provider-XZE1SDsY.cjs | AI (source-diff): Standard Vite/Rollup minified build output for emotion CSS-in-JS; not malicious. | ai | |
| source-diff | obfuscated-file:dist/emotion-cache-provider-B6yKtm_a.js | AI (source-diff): Standard Vite/Rollup minified build output for emotion CSS-in-JS; not malicious. | ai | |
| source-diff | obfuscated-file:dist/Typography-Pieq_mxw.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/SvgIcon-CjUZ_jwt.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | net-exec-file:dist/Portal-C6RJkJ6n.js | AI (source-diff): MUI Portal component bundle; net-exec heuristic is a false positive on React DOM rendering code. | ai | |
| source-diff | obfuscated-file:dist/Portal-B6TDsfBi.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/Menu-CgLII61r.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/Icon-DFhY5sRf.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/Dropdown-B6uSaA3z.cjs | AI (source-diff): Standard Vite/Rollup minified build output for React dropdown component; not malicious. | ai | |
| source-diff | obfuscated-file:dist/DEPRECATED_Tooltip-DL3MmzWZ.cjs | AI (source-diff): Standard Vite/Rollup minified build output for React tooltip component; not malicious. | ai | |
| source-diff | obfuscated-file:dist/CircularProgress-BWqRJiR-.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/Checkbox-BbF4jutm.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| source-diff | obfuscated-file:dist/ButtonBase-hZEG-21k.cjs | AI (source-diff): Standard Vite/Rollup minified build output for MUI React components; not malicious. | ai | |
| phantom-deps | phantom-dep:@mui/utils | AI (phantom-deps): MUI utils used in bundled components; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/react | AI (phantom-deps): Emotion react used in bundled emotion-cache-provider; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@emotion/cache | AI (phantom-deps): Emotion cache used in bundled emotion-cache-provider; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:react-use | AI (phantom-deps): Declared dependency; referenced in config/build, typical for shared UI library. | ai | |
| phantom-deps | phantom-dep:simplebar-react | AI (phantom-deps): Declared dependency; referenced in config/build, typical for shared UI library. | ai | |
| phantom-deps | phantom-dep:@emotion/styled | AI (phantom-deps): Declared dependency; referenced in config/build, typical for shared UI library. | ai |
Versions (showing 38 of 38)
| Version | Deps | Published |
|---|---|---|
| 2.31.1 | 10 / 24 | |
| 2.31.0 | 10 / 24 | |
| 2.30.0 | 10 / 24 | |
| 2.29.0 | 10 / 24 | |
| 2.28.0 | 10 / 24 | |
| 2.27.0 | 10 / 24 | |
| 2.26.0 | 10 / 24 | |
| 2.25.0 | 10 / 24 | |
| 2.24.0 | 10 / 24 | |
| 2.23.0 | 10 / 24 | |
| 2.22.0 | 10 / 24 | |
| 2.21.0 | 10 / 24 | |
| 2.20.0 | 10 / 24 | |
| 2.19.0 | 10 / 24 | |
| 2.18.1 | 10 / 24 | |
| 2.18.0 | 10 / 24 | |
| 2.17.0 | 10 / 24 | |
| 2.16.1 | 10 / 24 | |
| 2.16.0 | 10 / 24 | |
| 2.15.0 | 10 / 24 | |
| 2.14.0 | 10 / 24 | |
| 2.13.0 | 10 / 24 | |
| 2.12.0 | 10 / 24 | |
| 2.11.0 | 10 / 24 | |
| 2.10.0 | 10 / 24 | |
| 2.9.0 | 10 / 24 | |
| 2.8.0 | 10 / 24 | |
| 2.7.0 | 10 / 25 | |
| 2.6.0 | 10 / 25 | |
| 2.5.0 | 10 / 25 | |
| 2.4.1 | 10 / 25 | |
| 2.4.0 | 10 / 25 | |
| 2.3.1 | 10 / 25 | |
| 2.3.0 | 10 / 25 | |
| 2.2.0 | 9 / 24 | |
| 2.1.1 | 9 / 24 | |
| 2.1.0 | 9 / 24 | |
| 2.0.0 | 7 / 24 |
v2.31.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.31.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.