← Home

@uxf/ui

npm
100
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

uxf

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@floating-ui/react AI (phantom-deps): UI library re-exports dependencies; stable pattern for this package. ai
phantom-deps phantom-dep:jump.js AI (phantom-deps): UI library re-exports dependencies; stable pattern for this package. ai
phantom-deps phantom-dep:@uxf/core AI (phantom-deps): Same-org scoped dependency; re-exported by UI library. ai
phantom-deps phantom-dep:react-dropzone AI (phantom-deps): UI library re-exports dependencies; stable pattern for this package. ai
phantom-deps phantom-dep:@uxf/core-react AI (phantom-deps): Same-org scoped dependency; re-exported by UI library. ai
phantom-deps phantom-dep:@uxf/datepicker AI (phantom-deps): Same-org scoped dependency; re-exported by UI library. ai
phantom-deps phantom-dep:@headlessui/react AI (phantom-deps): UI library re-exports dependencies; stable pattern for this package. ai
phantom-deps phantom-dep:dayjs AI (phantom-deps): UI library re-exports dependencies; stable pattern for this package. ai
phantom-deps phantom-dep:color2k AI (phantom-deps): UI library re-exports dependencies; stable pattern for this package. ai
typosquat typosquat.levenshtein:pg AI (typosquat): Scoped package @uxf/ui from established org; not a typosquat of pg. ai
typosquat typosquat.levenshtein:qs AI (typosquat): Scoped package @uxf/ui from established org; not a typosquat of qs. ai
typosquat typosquat.levenshtein:joi AI (typosquat): Scoped package @uxf/ui from established org; not a typosquat of joi. ai
typosquat typosquat.levenshtein:yup AI (typosquat): Scoped package @uxf/ui from established org; not a typosquat of yup. ai
semgrep semgrep:dynamic-require AI (semgrep): Loads user-supplied Tailwind config path in a build-time token generator script; expected pattern. ai
typosquat typosquat.levenshtein:uuid AI (typosquat): Scoped package @uxf/ui from established org; not a typosquat of uuid. ai

Versions (showing 100 of 150)

Version Deps Published
11.122.4 0 / 12
11.122.3 0 / 12
11.122.2 0 / 12
11.122.1 0 / 12
11.122.0 0 / 12
11.120.0 0 / 12
11.119.0 0 / 12
11.118.2 0 / 12
11.118.0 0 / 12
11.117.2 0 / 12
11.115.0 0 / 12
11.114.0 0 / 12
11.113.0 0 / 12
11.112.1 0 / 12
11.112.0 0 / 12
11.111.2 0 / 12
11.111.0 0 / 12
11.110.1 0 / 12
11.110.0 0 / 12
11.108.0 0 / 12
11.107.0 5 / 8
11.106.0 10 / 3
11.105.0 10 / 3
11.104.0 10 / 3
11.102.0 10 / 3
11.101.0 10 / 3
11.100.1 10 / 3
11.100.0 10 / 3
11.99.1 10 / 3
11.99.0 10 / 3
11.97.0 10 / 3
11.96.1 10 / 3
11.95.1 10 / 3
11.95.0 10 / 3
11.94.0 10 / 3
11.93.3 10 / 3
11.93.2 10 / 3
11.93.1 10 / 3
11.93.0 10 / 3
11.92.3 10 / 3
11.92.2 10 / 3
11.92.1 10 / 3
11.92.0 10 / 3
11.91.0 9 / 3
11.90.1 9 / 3
11.90.0 9 / 3
11.89.0 9 / 3
11.88.2 9 / 3
11.88.1 9 / 3
11.88.0 9 / 3
11.87.0 9 / 3
11.86.0 9 / 3
11.85.0 10 / 4
11.80.6 10 / 3
11.80.4 10 / 3
11.80.2 10 / 3
11.80.1 10 / 3
11.80.0 10 / 3
11.79.0 10 / 3
11.78.0 10 / 3
11.77.2 10 / 3
11.77.0 10 / 3
11.76.0 10 / 3
11.75.1 10 / 3
11.74.5 10 / 3
11.74.4 10 / 3
11.74.2 10 / 3
11.74.1 10 / 3
11.74.0 10 / 3
11.72.3 10 / 3
11.72.0 10 / 3
11.71.0 10 / 3
11.70.0 11 / 3
11.68.2 11 / 3
11.67.0 11 / 3
11.66.0 11 / 3
11.64.5 11 / 3
11.61.0 11 / 3
11.60.4 11 / 3
11.60.1 11 / 3
11.58.1 11 / 3
11.58.0 11 / 3
11.56.0 11 / 3
11.55.0 11 / 3
11.54.0 11 / 3
11.53.2 11 / 3
11.53.1 11 / 3
11.53.0 11 / 3
11.52.2 11 / 3
11.52.1 11 / 3
11.52.0 11 / 3
11.51.2 11 / 3
11.51.1 11 / 3
11.51.0 11 / 3
11.50.0 11 / 3
11.49.4 11 / 3
11.49.1 11 / 3
11.49.0 11 / 3
11.48.4 11 / 3
11.48.3 11 / 3
Showing 100 of 150 Next page →

v11.122.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.122.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.122.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.122.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.122.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v11.61.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.60.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.60.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.58.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.58.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.56.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.55.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.54.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.53.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.53.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.53.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.52.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.52.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.52.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.51.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.51.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.51.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.50.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.49.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.49.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.49.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.48.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v11.48.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.