@times-components/article-in-depth
In Depth Article Template
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Long-established Times Components monorepo; lack of Sigstore provenance is consistent across all versions and not a security concern here. | ai | |
| phantom-deps | phantom-dep:@times-components/ad | AI (phantom-deps): Same-org sibling dep in a monorepo; phantom-dep heuristic is a stable false positive here. | ai | |
| phantom-deps | phantom-dep:@times-components/user-state | AI (phantom-deps): Same-org sibling dep in a monorepo; phantom-dep heuristic is a stable false positive here. | ai |
Versions (showing 51 of 683)
| Version | Deps | Published |
|---|---|---|
| 3.103.94 | 15 / 19 | |
| 3.103.93 | 15 / 19 | |
| 3.103.92 | 15 / 19 | |
| 3.103.91 | 15 / 19 | |
| 3.103.90 | 15 / 19 | |
| 3.103.89 | 15 / 19 | |
| 3.103.88 | 15 / 19 | |
| 3.103.87 | 15 / 19 | |
| 3.103.86 | 15 / 19 | |
| 3.103.85 | 15 / 19 | |
| 3.103.84 | 15 / 19 | |
| 3.103.83 | 15 / 19 | |
| 3.103.82 | 15 / 19 | |
| 3.103.81 | 15 / 19 | |
| 3.103.80 | 15 / 19 | |
| 3.103.79 | 15 / 19 | |
| 3.103.78 | 15 / 19 | |
| 3.103.77 | 15 / 19 | |
| 3.103.76 | 15 / 19 | |
| 3.103.74 | 15 / 19 | |
| 3.103.73 | 15 / 19 | |
| 3.103.72 | 15 / 19 | |
| 3.103.71 | 15 / 19 | |
| 3.103.70 | 15 / 19 | |
| 3.103.64 | 15 / 19 | |
| 3.103.61 | 15 / 19 | |
| 3.103.59 | 15 / 19 | |
| 3.103.58 | 15 / 19 | |
| 3.103.57 | 15 / 19 | |
| 3.103.56 | 15 / 19 | |
| 3.103.55 | 15 / 19 | |
| 3.103.54 | 15 / 19 | |
| 3.103.51 | 15 / 19 | |
| 3.103.50 | 15 / 19 | |
| 3.103.49 | 15 / 19 | |
| 3.103.48 | 15 / 19 | |
| 3.103.47 | 15 / 19 | |
| 3.103.46 | 15 / 19 | |
| 3.103.45 | 15 / 19 | |
| 3.103.44 | 15 / 19 | |
| 3.103.43 | 15 / 19 | |
| 3.103.42 | 15 / 19 | |
| 3.103.41 | 15 / 19 | |
| 3.103.40 | 15 / 19 | |
| 3.103.39 | 15 / 19 | |
| 3.103.38 | 15 / 19 | |
| 3.103.37 | 15 / 19 | |
| 3.103.36 | 15 / 19 | |
| 3.103.35 | 15 / 19 | |
| 3.103.34 | 15 / 19 | |
| 3.103.33 | 15 / 19 |
v3.103.94
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.103.93
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.103.92
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.103.91
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.103.90
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.