@tamagui/select — Greenflagged

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

nwienert

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
npm-metadata	no-description	AI (npm-metadata): Consistent with @tamagui monorepo sub-package conventions.	ai	2026/05/30
dependencies	unvetted-dep:@tamagui/list-item	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/use-previous	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/remove-scroll	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/create-context	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/animate-presence	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/use-controllable-state	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
bogus-package	bogus-package	AI (bogus-package): Tamagui monorepo sub-packages legitimately lack standalone descriptions/repos; metadata is in the root package.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/text	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/adapt	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/sheet	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/portal	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/focusable	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/separator	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/dismissable	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/focus-scope	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
dependencies	unvetted-dep:@tamagui/use-debounce	AI (dependencies): Sibling tamagui monorepo package pinned at same version; standard monorepo release pattern.	ai	2026/05/20
phantom-deps	phantom-dep:@floating-ui/react-dom	AI (phantom-deps): Referenced in config/conditional exports; stable false positive for this package.	ai	2026/05/20
phantom-deps	phantom-dep:@tamagui/remove-scroll	AI (phantom-deps): Same-org monorepo dep; phantom detection is a false positive for this package structure.	ai	2026/05/20
phantom-deps	phantom-dep:@tamagui/create-context	AI (phantom-deps): Same-org monorepo dep; phantom detection is a false positive for this package structure.	ai	2026/05/20
phantom-deps	phantom-dep:@floating-ui/react-native	AI (phantom-deps): Platform-specific dep; not imported on all platforms by design.	ai	2026/05/20
phantom-deps	phantom-dep:@tamagui/dismissable	AI (phantom-deps): Same-org monorepo dep; phantom detection is a false positive for this package structure.	ai	2026/05/20
phantom-deps	phantom-dep:@tamagui/use-event	AI (phantom-deps): Same-org monorepo dep; phantom detection is a false positive for this package structure.	ai	2026/05/20