@stonecrop/beam
UI component library for Stonecrop
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
knuckledownalchez
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | net-exec-file:dist/beam.umd.cjs | AI (source-diff): UMD bundle for a Vue component library; network reference is a Google Fonts CSS @import in injected styles, not a dropper pattern. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established UI component library with 178 versions; sparse README/keywords are a style choice, not spam. | ai | |
| phantom-deps | phantom-dep:onscan.js | AI (phantom-deps): Compiled Vue library; deps used in dist bundle, not directly imported in source files. | ai | |
| phantom-deps | phantom-dep:@vueuse/core | AI (phantom-deps): Compiled Vue library; deps used in dist bundle, not directly imported in source files. | ai | |
| phantom-deps | phantom-dep:@vueuse/components | AI (phantom-deps): Compiled Vue library; deps used in dist bundle, not directly imported in source files. | ai |
Versions (showing 51 of 148)
| Version | Deps | Published |
|---|---|---|
| 0.14.0 | 4 / 18 | |
| 0.13.14 | 4 / 17 | |
| 0.13.12 | 4 / 17 | |
| 0.13.11 | 4 / 17 | |
| 0.13.10 | 4 / 17 | |
| 0.13.9 | 4 / 17 | |
| 0.13.8 | 4 / 17 | |
| 0.13.7 | 4 / 17 | |
| 0.13.6 | 4 / 17 | |
| 0.13.5 | 4 / 17 | |
| 0.13.4 | 4 / 21 | |
| 0.13.3 | 4 / 21 | |
| 0.13.2 | 4 / 21 | |
| 0.13.1 | 4 / 21 | |
| 0.12.8 | 4 / 21 | |
| 0.12.7 | 4 / 21 | |
| 0.12.6 | 4 / 21 | |
| 0.12.5 | 4 / 21 | |
| 0.12.4 | 4 / 21 | |
| 0.12.1 | 4 / 21 | |
| 0.12.0 | 4 / 21 | |
| 0.11.8 | 4 / 21 | |
| 0.11.6 | 4 / 20 | |
| 0.11.5 | 4 / 20 | |
| 0.11.3 | 4 / 20 | |
| 0.11.2 | 4 / 20 | |
| 0.11.0 | 4 / 20 | |
| 0.10.16 | 4 / 20 | |
| 0.10.15 | 4 / 20 | |
| 0.10.14 | 4 / 20 | |
| 0.10.13 | 4 / 20 | |
| 0.10.12 | 4 / 20 | |
| 0.10.10 | 4 / 20 | |
| 0.10.8 | 4 / 20 | |
| 0.10.4 | 4 / 20 | |
| 0.10.3 | 4 / 20 | |
| 0.10.2 | 4 / 20 | |
| 0.10.1 | 4 / 20 | |
| 0.10.0 | 4 / 20 | |
| 0.8.12 | 5 / 19 | |
| 0.8.11 | 5 / 19 | |
| 0.8.10 | 5 / 19 | |
| 0.8.9 | 5 / 19 | |
| 0.8.8 | 5 / 19 | |
| 0.8.7 | 5 / 19 | |
| 0.8.6 | 5 / 19 | |
| 0.8.4 | 5 / 19 | |
| 0.8.2 | 5 / 19 | |
| 0.8.1 | 5 / 19 | |
| 0.7.8 | 5 / 19 | |
| 0.7.6 | 5 / 19 |
v0.14.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.13.14
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.