@telperion/elements
[](https://badge.fury.io/js/@telperion%2Felements) [](https://www.npmjs.com/package/@telperion/elements)
20
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
alisahinozcelik
Keywords
web-componentscustom-elementslitlit-elementframework-agnosticiconmaterial-symbolssimple-iconsthesvgrouterspaclient-side-routingurl-patterndrag-and-dropdrag-dropdetailsaccordionpopoverpopover-apicss-anchor-positioningselectselectboxmulti-selectbuttonform-associatedthemeable
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:iife/popover/index.js | AI (source-diff): Standard minified IIFE bundle output for a Lit web component; matches existing iife/* build pattern for this package. | ai | |
| source-diff | obfuscated-file:iife/router/index.js | AI (source-diff): Standard minified IIFE browser bundle declared in package.json exports; contains recognizable Lit boilerplate. | ai | |
| source-diff | obfuscated-file:iife/icon/index.js | AI (source-diff): Standard minified IIFE browser bundle declared in package.json exports; contains recognizable Lit boilerplate. | ai | |
| source-diff | obfuscated-file:iife/drag-drop/index.js | AI (source-diff): Standard minified IIFE browser bundle declared in package.json exports; contains recognizable Lit boilerplate. | ai | |
| source-diff | obfuscated-file:iife/button/index.js | AI (source-diff): IIFE bundle with source map; standard minified build output for CDN distribution, not obfuscation. | ai | |
| source-diff | obfuscated-file:iife/select/index.js | AI (source-diff): IIFE output is standard minified Lit bundle with accompanying source map; not obfuscation. | ai | |
| dependencies | unvetted-dep:@thalesrc/dom-utils | AI (dependencies): Same author org as this package; consistent with the thalesrc/telperion ecosystem pattern. | ai | |
| dependencies | unvetted-dep:@lit-labs/signals | AI (dependencies): Official Lit Labs experimental package; low risk for a UI component library. | ai | |
| dependencies | unvetted-dep:@telperion/extra-ts-types | AI (dependencies): First-party dep from same org/publisher; consistent across versions. | ai | |
| dependencies | unvetted-dep:@telperion/js-utils | AI (dependencies): First-party dep from same org/publisher; consistent across versions. | ai | |
| dependencies | unvetted-dep:@telperion/dom-utils | AI (dependencies): First-party dep from same org/publisher; consistent across versions. | ai | |
| provenance | no-provenance | AI (provenance): Low-traffic scoped package; absence of provenance is common and not a risk signal here. | ai |