@theme-ui/core
[](https://bundlephobia.com/package/@theme-ui/core)
52
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jxnblkjohnohasparuslachlanjc
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): hasparus is a documented Theme UI maintainer with a strong track record (533 approved, 0 rejected). The jxnblk→hasparus transition is a known legitimate handoff for the theme-ui monorepo. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): hasparus is a legitimate, established maintainer of @theme-ui packages with a clean publishing history. This addition is a known project transition, not a compromise. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): @theme-ui/core is the legitimate core module of the Theme UI design system by Brent Jackson; the name similarity to 'cors' is purely coincidental and not a typosquat. | ai | |
| provenance | no-provenance | AI (provenance): Established package with trusted publisher (hasparus, 525/0 record). Lack of Sigstore provenance is a process gap, not a security threat for this package. | ai |
Versions (showing 52 of 52)
| Version | Deps | Published |
|---|---|---|
| 0.17.4 | 2 / 4 | |
| 0.17.2 | 2 / 4 | |
| 0.17.1 | 2 / 4 | |
| 0.17.0 | 2 / 4 | |
| 0.16.2 | 2 / 4 | |
| 0.16.1 | 2 / 4 | |
| 0.16.0 | 2 / 4 | |
| 0.15.7 | 2 / 3 | |
| 0.15.5 | 2 / 3 | |
| 0.15.4 | 2 / 3 | |
| 0.15.3 | 2 / 3 | |
| 0.15.1 | 2 / 3 | |
| 0.15.0 | 2 / 3 | |
| 0.14.7 | 3 / 0 | |
| 0.14.6 | 3 / 0 | |
| 0.14.5 | 3 / 0 | |
| 0.14.4 | 3 / 0 | |
| 0.14.3 | 3 / 0 | |
| 0.14.2 | 3 / 0 | |
| 0.14.1 | 3 / 0 | |
| 0.14.0 | 3 / 0 | |
| 0.13.1 | 3 / 0 | |
| 0.13.0 | 3 / 0 | |
| 0.12.1 | 4 / 0 | |
| 0.12.0 | 4 / 0 | |
| 0.11.3 | 4 / 0 | |
| 0.11.2 | 4 / 0 | |
| 0.11.1 | 4 / 0 | |
| 0.11.0 | 4 / 0 | |
| 0.10.0 | 4 / 2 | |
| 0.9.1 | 4 / 2 | |
| 0.9.0 | 4 / 2 | |
| 0.8.4 | 4 / 2 | |
| 0.8.3 | 4 / 2 | |
| 0.8.2 | 4 / 2 | |
| 0.8.1 | 4 / 2 | |
| 0.8.0 | 5 / 2 | |
| 0.7.5 | 4 / 2 | |
| 0.7.4 | 4 / 2 | |
| 0.7.3 | 4 / 2 | |
| 0.7.2 | 4 / 2 | |
| 0.7.1 | 4 / 2 | |
| 0.7.0 | 4 / 2 | |
| 0.6.2 | 4 / 2 | |
| 0.6.1 | 4 / 2 | |
| 0.6.0 | 4 / 2 | |
| 0.3.5 | 3 / 1 | |
| 0.3.4 | 3 / 1 | |
| 0.3.3 | 3 / 1 | |
| 0.3.2 | 3 / 1 | |
| 0.3.1 | 3 / 1 | |
| 0.3.0 | 3 / 1 |