@thenamespace/ens-components
Production-ready React components for ENS name registration, record editing, and subname issuance.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:react-confetti | AI (phantom-deps): Config-referenced dep, heuristic false positive. | ai | |
| phantom-deps | phantom-dep:@adraffy/ens-normalize | AI (phantom-deps): Bundled dist; declared deps not directly imported is expected for this rollup build. | ai | |
| source-diff | encoded-string-file:dist/index.js | AI (source-diff): Known ens-normalize compressed IDNA table, documented/sourced, not injected payload. | ai | |
| dependencies | unvetted-dep:@namespacesdk/indexer | AI (dependencies): First-party namespace SDK dependency matching package's ENS domain purpose. | ai | |
| dependencies | unvetted-dep:@namespacesdk/addresses | AI (dependencies): First-party namespace SDK dependency matching package's ENS domain purpose. | ai |
Versions (showing 13 of 13)
| Version | Deps | Published |
|---|---|---|
| 1.4.0 | 13 / 23 | |
| 1.3.1 | 13 / 23 | |
| 1.3.0 | 13 / 23 | |
| 1.2.1 | 13 / 23 | |
| 1.2.0 | 13 / 23 | |
| 0.10.0 | 1 / 32 | |
| 0.9.0 | 0 / 31 | |
| 0.8.0 | 0 / 31 | |
| 0.7.0 | 0 / 31 | |
| 0.6.0 | 0 / 31 | |
| 0.5.0 | 0 / 30 | |
| 0.4.0 | 0 / 30 | |
| 0.3.0 | 0 / 30 |
v1.4.0
2 findingsModified file contains 8 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.10.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.