@snack-uikit/card
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Consistent across all versions of this package; no provenance is the norm for this publisher. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Publisher cloud-ru-tech has 250 approved packages; no suspicious changes in this version vs prior approved. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): Scoped @snack-uikit UI component; no relation to cors package, stable false positive. | ai |
Versions (showing 51 of 170)
| Version | Deps | Published |
|---|---|---|
| 0.21.0 | 11 / 0 | |
| 0.20.23 | 11 / 0 | |
| 0.20.22 | 11 / 0 | |
| 0.20.21 | 11 / 0 | |
| 0.20.20 | 11 / 0 | |
| 0.20.19 | 11 / 0 | |
| 0.20.18 | 11 / 0 | |
| 0.20.17 | 11 / 0 | |
| 0.20.16 | 11 / 0 | |
| 0.20.15 | 11 / 0 | |
| 0.20.13 | 11 / 0 | |
| 0.20.12 | 11 / 0 | |
| 0.20.9 | 11 / 0 | |
| 0.20.8 | 11 / 0 | |
| 0.20.7 | 11 / 0 | |
| 0.20.6 | 11 / 0 | |
| 0.20.5 | 11 / 0 | |
| 0.20.4 | 11 / 0 | |
| 0.20.3 | 11 / 0 | |
| 0.20.2 | 11 / 0 | |
| 0.20.1 | 11 / 0 | |
| 0.20.0 | 11 / 0 | |
| 0.19.16 | 11 / 0 | |
| 0.19.15 | 11 / 0 | |
| 0.19.14 | 11 / 0 | |
| 0.19.13 | 11 / 0 | |
| 0.19.12 | 11 / 0 | |
| 0.19.11 | 11 / 0 | |
| 0.19.10 | 11 / 0 | |
| 0.19.9 | 11 / 0 | |
| 0.19.8 | 11 / 0 | |
| 0.19.7 | 11 / 0 | |
| 0.19.6 | 11 / 0 | |
| 0.19.5 | 11 / 0 | |
| 0.19.4 | 11 / 0 | |
| 0.19.3 | 11 / 0 | |
| 0.19.2 | 11 / 0 | |
| 0.19.1 | 11 / 0 | |
| 0.19.0 | 11 / 0 | |
| 0.18.4 | 11 / 0 | |
| 0.18.3 | 11 / 0 | |
| 0.18.2 | 11 / 0 | |
| 0.18.1 | 11 / 0 | |
| 0.18.0 | 11 / 0 | |
| 0.17.0 | 11 / 0 | |
| 0.16.32 | 11 / 0 | |
| 0.16.31 | 11 / 0 | |
| 0.16.30 | 11 / 0 | |
| 0.16.29 | 11 / 0 | |
| 0.16.28 | 11 / 0 | |
| 0.16.27 | 11 / 0 |
v0.21.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.20.23
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.18.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.32
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.31
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.30
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.29
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.28
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.27
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.