@times-components/card
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:cors | AI (typosquat): Scoped @times-components/card is a legitimate Times Components monorepo package; Levenshtein match to 'cors' is a false positive. | ai | |
| phantom-deps | phantom-dep:@times-components/responsive | AI (phantom-deps): Same-org sibling dependency; phantom-dep heuristic unreliable for monorepo packages. | ai |
Versions (showing 51 of 166)
| Version | Deps | Published |
|---|---|---|
| 6.17.49 | 7 / 20 | |
| 6.17.48 | 7 / 20 | |
| 6.17.47 | 7 / 20 | |
| 6.17.46 | 7 / 20 | |
| 6.17.45 | 7 / 20 | |
| 6.17.44 | 7 / 20 | |
| 6.17.43 | 7 / 20 | |
| 6.17.42 | 7 / 20 | |
| 6.17.41 | 7 / 20 | |
| 6.17.40 | 7 / 20 | |
| 6.17.39 | 7 / 20 | |
| 6.17.38 | 7 / 20 | |
| 6.17.37 | 7 / 20 | |
| 6.17.36 | 7 / 20 | |
| 6.17.35 | 7 / 20 | |
| 6.17.34 | 7 / 20 | |
| 6.17.33 | 7 / 20 | |
| 6.17.32 | 7 / 20 | |
| 6.17.31 | 7 / 20 | |
| 6.17.30 | 7 / 20 | |
| 6.17.29 | 7 / 20 | |
| 6.17.28 | 7 / 20 | |
| 6.17.27 | 7 / 20 | |
| 6.17.26 | 7 / 20 | |
| 6.17.25 | 7 / 20 | |
| 6.17.24 | 7 / 20 | |
| 6.17.23 | 7 / 20 | |
| 6.17.22 | 7 / 20 | |
| 6.17.21 | 7 / 20 | |
| 6.17.20 | 7 / 20 | |
| 6.17.19 | 7 / 20 | |
| 6.17.18 | 7 / 20 | |
| 6.17.17 | 7 / 20 | |
| 6.17.16 | 7 / 20 | |
| 6.17.15 | 7 / 20 | |
| 6.17.14 | 7 / 20 | |
| 6.17.13 | 7 / 20 | |
| 6.17.12 | 7 / 20 | |
| 6.17.11 | 7 / 20 | |
| 6.17.10 | 7 / 20 | |
| 6.17.9 | 7 / 20 | |
| 6.17.8 | 7 / 20 | |
| 6.17.7 | 7 / 20 | |
| 6.17.6 | 7 / 20 | |
| 6.17.5 | 7 / 20 | |
| 6.17.4 | 7 / 20 | |
| 6.17.3 | 7 / 20 | |
| 6.17.2 | 7 / 20 | |
| 6.17.1 | 7 / 20 | |
| 6.17.0 | 7 / 20 | |
| 6.16.13 | 7 / 20 |
v6.17.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.17.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.17.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.16.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.