← Home

@tangle-network/sandbox-ui

npm Repository Homepage

Unified UI component library for Tangle Sandbox — primitives, chat, dashboard, terminal, editor, and workspace components

32
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

vutuanlinh2k2drewstonetjemmmictin-tangle-tools

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): CI metadata gap, not tied to malicious behavior; provenance attestation still present. ai
publish-pattern new-deps-added AI (publish-pattern): tiptap deps match editor feature scope of this UI library ai
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing with SLSA attestation; consistent with legitimate automation adoption. ai
phantom-deps phantom-dep:@lobehub/icons-static-svg AI (phantom-deps): Icon asset library referenced in bundler/config; not directly imported in source is expected for this type of dep. ai
dependencies unvetted-dep:@nanostores/react AI (dependencies): Widely-used state management library; stable false positive for this UI component package. ai
dependencies unvetted-dep:@radix-ui/react-avatar AI (dependencies): Well-known Radix UI primitive; stable false positive for this UI component package. ai
phantom-deps phantom-dep:react-pdf AI (phantom-deps): react-pdf is a declared runtime dep used in bundled output; phantom-dep heuristic false positive for this UI library. ai
phantom-deps phantom-dep:@radix-ui/react-toast AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this component library. ai

Versions (showing 32 of 133)

Version Deps Published
0.12.0 25 / 35
0.11.0 24 / 35
0.10.9 24 / 35
0.10.8 24 / 35
0.10.7 24 / 35
0.10.6 24 / 35
0.10.5 24 / 35
0.10.4 24 / 35
0.10.3 24 / 35
0.10.2 24 / 35
0.10.1 24 / 35
0.10.0 24 / 35
0.9.0 24 / 35
0.8.4 24 / 29
0.6.1 24 / 27
0.6.0 24 / 27
0.5.2 24 / 27
0.5.1 24 / 27
0.5.0 24 / 27
0.4.0 23 / 18
0.3.13 23 / 18
0.3.12 23 / 18
0.3.11 23 / 18
0.3.10 23 / 18
0.3.7 19 / 19
0.3.6 19 / 19
0.3.5 19 / 19
0.3.4 19 / 19
0.3.3 19 / 19
0.2.2 19 / 19
0.2.1 19 / 19
0.2.0 19 / 19

v0.10.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.10.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.