@tellescope/chat
Shared UI components designed with support for React and React Native in mind. To be used across Tellescope web apps and open-sourced modules.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| bogus-package | bogus-package | AI (bogus-package): Part of tellescope monorepo; sparse README/keywords is consistent across all 814 versions, not spam. | ai | |
| phantom-deps | phantom-dep:eslint | AI (phantom-deps): ESLint declared as runtime dep but used as dev tooling; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:eslint-plugin-react | AI (phantom-deps): ESLint plugin declared as runtime dep but used as dev tooling; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/parser | AI (phantom-deps): TS ESLint tooling declared as runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@typescript-eslint/eslint-plugin | AI (phantom-deps): TS ESLint tooling declared as runtime dep; stable false positive for this package. | ai | |
| typosquat | typosquat.levenshtein:chalk | AI (typosquat): @tellescope/chat is a scoped React chat component, not a typosquat of chalk; name similarity is coincidental. | ai | |
| phantom-deps | phantom-dep:@emotion/react | AI (phantom-deps): MUI peer/config dependency; standard pattern for React component libraries. | ai | |
| phantom-deps | phantom-dep:@emotion/styled | AI (phantom-deps): MUI peer/config dependency; standard pattern for React component libraries. | ai | |
| phantom-deps | phantom-dep:@fontsource/roboto | AI (phantom-deps): Font dependency referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@mui/icons-material | AI (phantom-deps): MUI icons referenced in config; stable false positive for this React component library. | ai |
Versions (showing 51 of 103)
| Version | Deps | Published |
|---|---|---|
| 1.252.1 | 13 / 7 | |
| 1.252.0 | 13 / 7 | |
| 1.251.0 | 13 / 7 | |
| 1.250.2 | 13 / 7 | |
| 1.250.1 | 13 / 7 | |
| 1.250.0 | 13 / 7 | |
| 1.249.2 | 13 / 7 | |
| 1.249.1 | 13 / 7 | |
| 1.249.0 | 13 / 7 | |
| 1.248.0 | 13 / 7 | |
| 1.247.0 | 13 / 7 | |
| 1.246.2 | 13 / 7 | |
| 1.246.1 | 13 / 7 | |
| 1.245.1 | 13 / 7 | |
| 1.245.0 | 13 / 7 | |
| 1.244.4 | 13 / 7 | |
| 1.244.3 | 13 / 7 | |
| 1.244.2 | 13 / 7 | |
| 1.244.1 | 13 / 7 | |
| 1.244.0 | 13 / 7 | |
| 1.243.1 | 13 / 7 | |
| 1.243.0 | 13 / 7 | |
| 1.242.10 | 13 / 7 | |
| 1.242.9 | 13 / 7 | |
| 1.242.8 | 13 / 7 | |
| 1.242.7 | 17 / 3 | |
| 1.242.6 | 17 / 3 | |
| 1.242.5 | 17 / 3 | |
| 1.242.4 | 17 / 3 | |
| 1.242.3 | 17 / 3 | |
| 1.242.2 | 17 / 3 | |
| 1.242.1 | 17 / 3 | |
| 1.242.0 | 17 / 3 | |
| 1.241.0 | 17 / 3 | |
| 1.240.0 | 17 / 3 | |
| 1.239.1 | 17 / 3 | |
| 1.239.0 | 17 / 3 | |
| 1.238.0 | 17 / 3 | |
| 1.237.6 | 17 / 3 | |
| 1.237.5 | 17 / 3 | |
| 1.237.4 | 17 / 3 | |
| 1.237.3 | 17 / 3 | |
| 1.237.2 | 17 / 3 | |
| 1.237.1 | 17 / 3 | |
| 1.237.0 | 17 / 3 | |
| 1.236.2 | 17 / 3 | |
| 1.236.1 | 17 / 3 | |
| 1.236.0 | 17 / 3 | |
| 1.235.2 | 17 / 3 | |
| 1.235.1 | 17 / 3 | |
| 1.235.0 | 17 / 3 |
v1.252.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.252.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.251.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.250.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.250.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.250.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.249.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.249.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.249.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.248.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.247.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.246.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.246.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.245.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.245.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.244.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.244.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.244.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.244.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.244.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.243.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.243.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.242.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.241.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.240.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.239.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.239.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.238.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.237.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.237.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.237.4
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.237.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.237.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.237.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.237.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.236.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.236.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.236.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.235.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.235.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.235.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.