@synerise/design-system
DesignSystem UI Component for the Synerise Design System
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@synerise/ds-card | AI (phantom-deps): Aggregator package re-exports sub-packages; phantom-dep expected across all ds-* deps. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New deps are official same-org @synerise/ds-* sub-packages, normal for this meta-package. | ai | |
| phantom-deps | phantom-dep:@synerise/ds-rich-text | AI (phantom-deps): Barrel package re-exports all @synerise/ds-* components; same-org sibling, not imported directly by design. | ai | |
| phantom-deps | phantom-dep:@synerise/ds-rich-text-renderer | AI (phantom-deps): Barrel package re-exports all @synerise/ds-* components; same-org sibling, not imported directly by design. | ai | |
| dependencies | unvetted-dep:@synerise/ds-rich-text-renderer | AI (dependencies): First-party sibling package within same org scope, consistent with 100+ existing deps. | ai | |
| dependencies | unvetted-dep:@synerise/ds-rich-text | AI (dependencies): First-party sibling package within same org scope, consistent with 100+ existing deps. | ai | |
| dependencies | unvetted-dep:@synerise/ds-tag | AI (dependencies): Same-org monorepo sibling package, expected structural dependency. | ai | |
| phantom-deps | phantom-dep:@synerise/ds-core | AI (phantom-deps): Same-org monorepo re-export pattern; not a real phantom-dep risk. | ai | |
| dependencies | unvetted-dep:@synerise/ds-manageable-list | AI (dependencies): Same-org subcomponent of this design-system aggregator. | ai | |
| dependencies | unvetted-dep:@synerise/ds-toaster | AI (dependencies): Same-org subcomponent of this design-system aggregator. | ai | |
| dependencies | unvetted-dep:@synerise/ds-subtle-form | AI (dependencies): Same-org subcomponent of this design-system aggregator. | ai | |
| dependencies | unvetted-dep:@synerise/ds-avatar-group | AI (dependencies): Same-org subcomponent of this design-system aggregator. | ai | |
| dependencies | unvetted-dep:@synerise/ds-confirmation | AI (dependencies): Same-org subcomponent of this design-system aggregator. | ai | |
| dependencies | unvetted-dep:@synerise/ds-file-uploader | AI (dependencies): Same-org subcomponent of this design-system aggregator. | ai | |
| phantom-deps | phantom-dep:@synerise/ds-tag | AI (phantom-deps): Design-system aggregator re-exporting same-org sub-packages; expected pattern. | ai | |
| dependencies | unvetted-dep:@synerise/ds-operators | AI (dependencies): First-party same-org sub-package of this design system aggregator. | ai | |
| dependencies | unvetted-dep:@synerise/ds-image | AI (dependencies): Same-org first-party sub-package, consistent with existing dep set. | ai | |
| phantom-deps | phantom-dep:@synerise/ds-image | AI (phantom-deps): Aggregator package re-exports same-org sub-packages; not a real import concern. | ai |
Versions (showing 11 of 11)
| Version | Deps | Published |
|---|---|---|
| 1.14.0 | 119 / 0 | |
| 1.13.0 | 117 / 0 | |
| 1.12.10 | 116 / 0 | |
| 1.12.8 | 116 / 0 | |
| 1.12.6 | 116 / 0 | |
| 1.11.1 | 115 / 0 | |
| 1.8.1 | 112 / 0 | |
| 1.7.11 | 111 / 0 | |
| 1.5.18 | 108 / 0 | |
| 1.4.1 | 106 / 0 | |
| 1.4.0 | 106 / 0 |
v1.14.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.13.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.12.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.11.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.