@taiga-ui/stylelint-config
Taiga UI stylelint config
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:stylelint-plugin-use-baseline | AI (dependencies): Stylelint plugin used as a config dependency; no malicious indicators, stable pattern for this package. | ai | |
| provenance | no-provenance | AI (provenance): Established Taiga UI toolkit package; provenance not yet enabled but no other risk signals present. | ai | |
| phantom-deps | phantom-dep:postcss-less | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:stylelint-order | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:stylelint-rem-over-px | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:stylelint-use-logical | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:stylelint-config-standard | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:@stylistic/stylelint-plugin | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:stylelint-plugin-logical-css | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:stylelint-plugin-use-baseline | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:stylelint-no-unsupported-browser-features | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:@stylistic/stylelint-config | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| phantom-deps | phantom-dep:postcss | AI (phantom-deps): Config-only package; deps referenced in config files, not JS imports. Expected pattern. | ai | |
| provenance | publisher-changed | AI (provenance): splincode is a named contributor in package.json and has a clean track record; transition appears legitimate for this package. | ai |
Versions (showing 100 of 266)
| Version | Deps | Published |
|---|---|---|
| 0.440.0 | 0 / 0 | |
| 0.439.0 | 0 / 0 | |
| 0.438.0 | 0 / 0 | |
| 0.437.0 | 0 / 0 | |
| 0.436.0 | 0 / 0 | |
| 0.435.0 | 0 / 0 | |
| 0.434.0 | 0 / 0 | |
| 0.433.0 | 0 / 0 | |
| 0.432.0 | 0 / 0 | |
| 0.431.0 | 0 / 0 | |
| 0.430.0 | 0 / 0 | |
| 0.429.0 | 0 / 0 | |
| 0.428.0 | 0 / 0 | |
| 0.427.0 | 0 / 0 | |
| 0.426.0 | 0 / 0 | |
| 0.425.0 | 0 / 0 | |
| 0.424.0 | 0 / 0 | |
| 0.423.0 | 0 / 0 | |
| 0.422.0 | 0 / 0 | |
| 0.421.0 | 0 / 0 | |
| 0.420.0 | 0 / 0 | |
| 0.419.0 | 0 / 0 | |
| 0.418.0 | 0 / 0 | |
| 0.417.0 | 0 / 0 | |
| 0.416.0 | 0 / 0 | |
| 0.415.0 | 0 / 0 | |
| 0.414.0 | 0 / 0 | |
| 0.413.0 | 0 / 0 | |
| 0.412.0 | 0 / 0 | |
| 0.411.0 | 0 / 0 | |
| 0.410.0 | 0 / 0 | |
| 0.409.0 | 0 / 0 | |
| 0.408.0 | 0 / 0 | |
| 0.407.0 | 0 / 0 | |
| 0.406.0 | 0 / 0 | |
| 0.405.0 | 0 / 0 | |
| 0.404.0 | 0 / 0 | |
| 0.403.0 | 0 / 0 | |
| 0.402.0 | 0 / 0 | |
| 0.401.0 | 0 / 0 | |
| 0.400.0 | 0 / 0 | |
| 0.399.0 | 0 / 0 | |
| 0.398.0 | 0 / 0 | |
| 0.397.0 | 0 / 0 | |
| 0.396.0 | 0 / 0 | |
| 0.395.0 | 0 / 0 | |
| 0.394.0 | 0 / 0 | |
| 0.393.0 | 0 / 0 | |
| 0.392.0 | 0 / 0 | |
| 0.391.0 | 0 / 0 | |
| 0.390.0 | 0 / 0 | |
| 0.389.0 | 0 / 0 | |
| 0.388.0 | 0 / 0 | |
| 0.387.0 | 0 / 0 | |
| 0.386.0 | 0 / 0 | |
| 0.385.0 | 0 / 0 | |
| 0.384.0 | 0 / 0 | |
| 0.383.0 | 0 / 0 | |
| 0.382.0 | 0 / 0 | |
| 0.381.0 | 0 / 0 | |
| 0.380.0 | 0 / 0 | |
| 0.379.0 | 0 / 0 | |
| 0.378.0 | 0 / 0 | |
| 0.377.0 | 0 / 0 | |
| 0.376.0 | 0 / 0 | |
| 0.375.0 | 0 / 0 | |
| 0.374.0 | 0 / 0 | |
| 0.373.0 | 0 / 0 | |
| 0.372.0 | 0 / 0 | |
| 0.371.0 | 0 / 0 | |
| 0.370.0 | 0 / 0 | |
| 0.369.0 | 0 / 0 | |
| 0.368.0 | 0 / 0 | |
| 0.367.0 | 0 / 0 | |
| 0.366.0 | 0 / 0 | |
| 0.365.0 | 0 / 0 | |
| 0.364.0 | 0 / 0 | |
| 0.363.0 | 0 / 0 | |
| 0.362.0 | 0 / 0 | |
| 0.361.0 | 0 / 0 | |
| 0.360.0 | 0 / 0 | |
| 0.359.0 | 0 / 0 | |
| 0.358.0 | 0 / 0 | |
| 0.357.0 | 0 / 0 | |
| 0.356.0 | 0 / 0 | |
| 0.355.0 | 0 / 0 | |
| 0.354.0 | 0 / 0 | |
| 0.353.0 | 0 / 0 | |
| 0.352.0 | 0 / 0 | |
| 0.351.0 | 0 / 0 | |
| 0.350.0 | 0 / 0 | |
| 0.349.0 | 0 / 0 | |
| 0.348.0 | 0 / 0 | |
| 0.347.0 | 0 / 0 | |
| 0.346.0 | 0 / 0 | |
| 0.345.0 | 0 / 0 | |
| 0.344.0 | 0 / 0 | |
| 0.343.0 | 0 / 0 | |
| 0.342.0 | 0 / 0 | |
| 0.341.0 | 0 / 0 |
v0.440.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.439.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.438.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.437.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.436.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.435.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.434.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.432.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.431.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.430.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.429.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.428.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.427.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.426.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.425.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.424.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.423.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.422.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.421.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.420.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.419.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.418.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.417.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.415.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.414.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.413.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.412.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.411.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.410.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.409.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.408.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.407.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.406.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.405.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.404.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.403.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.402.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.401.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.400.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.399.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.398.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.397.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.395.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.394.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.393.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.392.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.391.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.390.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.389.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.388.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.386.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.385.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.384.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.383.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.382.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.381.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.380.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.379.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.378.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.377.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.376.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.375.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.374.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.373.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.372.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.371.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.370.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.369.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.368.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.367.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.366.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.365.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.364.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.363.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.362.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.361.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.360.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.359.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.358.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.357.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.356.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.355.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.354.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.353.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.352.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.351.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.350.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.349.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.348.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.347.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.346.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.345.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.344.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.343.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.342.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.341.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.