@times-components/article-main-video
Main Video Article Template
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@times-components/context | AI (phantom-deps): Same-org monorepo sibling; phantom-dep false positive for this package scope. | ai | |
| provenance | no-provenance | AI (provenance): Established publisher with 130 approved packages; lack of provenance is common and not a risk signal here. | ai |
Versions (showing 51 of 143)
| Version | Deps | Published |
|---|---|---|
| 1.20.91 | 15 / 17 | |
| 1.20.90 | 15 / 17 | |
| 1.20.89 | 15 / 17 | |
| 1.20.88 | 15 / 17 | |
| 1.20.87 | 15 / 17 | |
| 1.20.86 | 15 / 17 | |
| 1.20.85 | 15 / 17 | |
| 1.20.84 | 15 / 17 | |
| 1.20.83 | 15 / 17 | |
| 1.20.82 | 15 / 17 | |
| 1.20.81 | 15 / 17 | |
| 1.20.80 | 15 / 17 | |
| 1.20.79 | 15 / 17 | |
| 1.20.78 | 15 / 17 | |
| 1.20.77 | 15 / 17 | |
| 1.20.76 | 15 / 17 | |
| 1.20.75 | 15 / 17 | |
| 1.20.74 | 15 / 17 | |
| 1.20.73 | 15 / 17 | |
| 1.20.71 | 15 / 17 | |
| 1.20.70 | 15 / 17 | |
| 1.20.69 | 15 / 17 | |
| 1.20.68 | 15 / 17 | |
| 1.20.67 | 15 / 17 | |
| 1.20.66 | 15 / 17 | |
| 1.20.56 | 15 / 17 | |
| 1.20.55 | 15 / 17 | |
| 1.20.54 | 15 / 17 | |
| 1.20.53 | 15 / 17 | |
| 1.20.52 | 15 / 17 | |
| 1.20.51 | 15 / 17 | |
| 1.20.48 | 15 / 17 | |
| 1.20.47 | 15 / 17 | |
| 1.20.46 | 15 / 17 | |
| 1.20.45 | 15 / 17 | |
| 1.20.44 | 15 / 17 | |
| 1.20.43 | 15 / 17 | |
| 1.20.42 | 15 / 17 | |
| 1.20.41 | 15 / 17 | |
| 1.20.40 | 15 / 17 | |
| 1.20.39 | 15 / 17 | |
| 1.20.38 | 15 / 17 | |
| 1.20.37 | 15 / 17 | |
| 1.20.36 | 15 / 17 | |
| 1.20.35 | 15 / 17 | |
| 1.20.34 | 15 / 17 | |
| 1.20.33 | 15 / 17 | |
| 1.20.32 | 15 / 17 | |
| 1.20.31 | 15 / 17 | |
| 1.20.30 | 15 / 17 | |
| 1.20.29 | 15 / 17 |
v1.20.91
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.20.90
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.20.89
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.20.88
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.20.87
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.