@times-components/article-magazine-standard
Magazine Standard Article Template
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Large established monorepo publisher; provenance not part of their release pipeline across all versions. | ai | |
| phantom-deps | phantom-dep:@times-components/ad | AI (phantom-deps): Sibling monorepo dep; phantom-dep heuristic is a stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@times-components/user-state | AI (phantom-deps): Sibling monorepo dep; phantom-dep heuristic is a stable false positive for this package. | ai |
Versions (showing 100 of 680)
| Version | Deps | Published |
|---|---|---|
| 3.95.19 | 15 / 19 | |
| 3.95.18 | 15 / 19 | |
| 3.95.17 | 15 / 19 | |
| 3.95.16 | 15 / 19 | |
| 3.95.15 | 15 / 19 | |
| 3.95.14 | 15 / 19 | |
| 3.95.13 | 15 / 19 | |
| 3.95.12 | 15 / 19 | |
| 3.95.11 | 15 / 19 | |
| 3.95.10 | 15 / 19 | |
| 3.95.9 | 15 / 19 | |
| 3.95.8 | 15 / 19 | |
| 3.95.7 | 15 / 19 | |
| 3.95.6 | 15 / 19 | |
| 3.95.5 | 15 / 19 | |
| 3.95.4 | 15 / 19 | |
| 3.95.3 | 15 / 19 | |
| 3.95.2 | 15 / 19 | |
| 3.95.1 | 15 / 19 | |
| 3.95.0 | 15 / 19 | |
| 3.94.0 | 15 / 19 | |
| 3.93.5 | 15 / 19 | |
| 3.93.4 | 15 / 19 | |
| 3.93.3 | 15 / 19 | |
| 3.93.2 | 15 / 19 | |
| 3.93.1 | 15 / 19 | |
| 3.93.0 | 15 / 19 | |
| 3.92.5 | 15 / 19 | |
| 3.92.3 | 15 / 19 | |
| 3.92.2 | 15 / 19 | |
| 3.92.1 | 15 / 19 | |
| 3.92.0 | 15 / 19 | |
| 3.91.0 | 15 / 19 | |
| 3.90.15 | 15 / 19 | |
| 3.90.14 | 15 / 19 | |
| 3.90.13 | 15 / 19 | |
| 3.90.12 | 15 / 19 | |
| 3.90.11 | 15 / 19 | |
| 3.90.10 | 15 / 19 | |
| 3.90.9 | 15 / 19 | |
| 3.90.8 | 15 / 19 | |
| 3.90.7 | 15 / 19 | |
| 3.90.6 | 15 / 19 | |
| 3.90.5 | 15 / 19 | |
| 3.90.4 | 15 / 19 | |
| 3.90.3 | 15 / 19 | |
| 3.90.2 | 15 / 19 | |
| 3.90.1 | 15 / 19 | |
| 3.90.0 | 15 / 19 | |
| 3.89.20 | 15 / 19 | |
| 3.89.19 | 15 / 19 | |
| 3.89.18 | 15 / 19 | |
| 3.89.17 | 15 / 19 | |
| 3.89.16 | 15 / 19 | |
| 3.89.15 | 15 / 19 | |
| 3.89.14 | 15 / 19 | |
| 3.89.13 | 15 / 19 | |
| 3.89.12 | 15 / 19 | |
| 3.89.11 | 15 / 19 | |
| 3.89.10 | 15 / 19 | |
| 3.89.9 | 15 / 19 | |
| 3.89.8 | 15 / 19 | |
| 3.89.7 | 15 / 19 | |
| 3.89.6 | 15 / 19 | |
| 3.89.5 | 15 / 19 | |
| 3.89.4 | 15 / 19 | |
| 3.89.3 | 15 / 19 | |
| 3.89.2 | 15 / 19 | |
| 3.89.1 | 15 / 19 | |
| 3.89.0 | 15 / 19 | |
| 3.88.3 | 15 / 19 | |
| 3.88.2 | 15 / 19 | |
| 3.88.1 | 15 / 19 | |
| 3.88.0 | 15 / 19 | |
| 3.87.6 | 15 / 19 | |
| 3.87.5 | 15 / 19 | |
| 3.87.4 | 15 / 19 | |
| 3.87.3 | 15 / 19 | |
| 3.87.2 | 15 / 19 | |
| 3.87.1 | 15 / 19 | |
| 3.87.0 | 15 / 19 | |
| 3.86.13 | 15 / 19 | |
| 3.86.12 | 15 / 19 | |
| 3.86.11 | 15 / 19 | |
| 3.86.10 | 15 / 19 | |
| 3.86.9 | 15 / 19 | |
| 3.86.8 | 15 / 19 | |
| 3.86.7 | 15 / 19 | |
| 3.86.6 | 15 / 19 | |
| 3.86.4 | 15 / 19 | |
| 3.86.3 | 15 / 19 | |
| 3.86.1 | 15 / 19 | |
| 3.86.0 | 15 / 19 | |
| 3.85.12 | 15 / 19 | |
| 3.85.11 | 15 / 19 | |
| 3.85.10 | 15 / 19 | |
| 3.85.9 | 15 / 19 | |
| 3.85.8 | 15 / 19 | |
| 3.85.7 | 15 / 19 | |
| 3.85.6 | 15 / 19 |
v3.93.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.93.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.93.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.92.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.92.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.92.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.92.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.92.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.91.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.15
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.14
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.13
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.12
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.11
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.10
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.9
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.8
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.90.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.20
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.19
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.18
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.17
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.16
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.15
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.14
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.13
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.12
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.11
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.10
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.9
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.8
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.89.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.88.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.88.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.88.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.88.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.87.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.87.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.87.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.87.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.87.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.87.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.87.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.13
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.12
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.11
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.10
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.9
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.8
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.86.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.85.12
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.85.11
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.85.10
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.85.9
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.85.8
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.85.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.85.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.