@vef-framework-react/components
Components for VEF Framework
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/cjs/icon-picker/icon-grid.cjs | AI (source-diff): Rolldown-bundled output with inline sourcemaps; not obfuscated, standard build artifact for this package. | ai | |
| phantom-deps | phantom-dep:@codemirror/autocomplete | AI (phantom-deps): CodeMirror packages are peer/transitive deps of @uiw/react-codemirror; declared for version pinning, not directly imported. | ai | |
| phantom-deps | phantom-dep:@codemirror/language | AI (phantom-deps): CodeMirror packages are peer/transitive deps of @uiw/react-codemirror; declared for version pinning, not directly imported. | ai | |
| phantom-deps | phantom-dep:@codemirror/commands | AI (phantom-deps): CodeMirror packages are peer/transitive deps of @uiw/react-codemirror; declared for version pinning, not directly imported. | ai | |
| phantom-deps | phantom-dep:@codemirror/lint | AI (phantom-deps): CodeMirror packages are peer/transitive deps of @uiw/react-codemirror; declared for version pinning, not directly imported. | ai | |
| source-diff | obfuscated-file:dist/es/icon-picker/index.js | AI (source-diff): Rolldown-bundled output with inline sourcemaps; not obfuscated, standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/es/code-editor/index.js | AI (source-diff): Rolldown-bundled output with inline sourcemaps; not obfuscated, standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/es/icon-picker/icon-grid.js | AI (source-diff): Rolldown-bundled output with inline sourcemaps; not obfuscated, standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/icon-picker/index.cjs | AI (source-diff): Rolldown-bundled output with inline sourcemaps; not obfuscated, standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/code-editor/index.cjs | AI (source-diff): Rolldown-bundled output with inline sourcemaps; not obfuscated, standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/form-modal/components/draggable-wrapper.cjs | AI (source-diff): Rolldown CJS bundle with inline source map; content is a draggable modal wrapper component. | ai | |
| phantom-deps | phantom-dep:echarts-for-react | AI (phantom-deps): Declared dep referenced via re-export or config; stable FP for a components package wrapping echarts. | ai | |
| source-diff | obfuscated-file:dist/cjs/pro-table/components/column-setting-item.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a known implicit runtime dependency injected by TypeScript compilation. | ai | |
| source-diff | obfuscated-file:dist/cjs/pro-search/styles.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/page/styles.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/crud/components/selection-indicator.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/page/components/scroll-content.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/modal/modal.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/pro-table/index.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/form-drawer/index.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/cjs/pro-table/components/column-settings-panel.cjs | AI (source-diff): Rolldown CJS bundle output with embedded source maps; not obfuscated. | ai |
Versions (showing 30 of 30)
| Version | Deps | Published |
|---|---|---|
| 2.12.0 | 38 / 2 | |
| 2.11.0 | 36 / 2 | |
| 2.10.0 | 36 / 2 | |
| 2.9.0 | 36 / 2 | |
| 2.8.0 | 36 / 2 | |
| 2.7.0 | 36 / 2 | |
| 2.6.0 | 36 / 2 | |
| 2.5.0 | 36 / 2 | |
| 2.4.4 | 36 / 2 | |
| 2.4.3 | 36 / 2 | |
| 2.4.2 | 36 / 2 | |
| 2.4.1 | 36 / 2 | |
| 2.4.0 | 36 / 2 | |
| 2.3.0 | 22 / 2 | |
| 2.2.2 | 22 / 2 | |
| 2.2.1 | 22 / 2 | |
| 2.2.0 | 22 / 2 | |
| 2.1.12 | 22 / 2 | |
| 2.1.11 | 22 / 2 | |
| 2.1.10 | 22 / 2 | |
| 2.1.9 | 22 / 2 | |
| 2.1.8 | 22 / 2 | |
| 2.1.7 | 22 / 2 | |
| 2.1.6 | 22 / 2 | |
| 2.1.5 | 22 / 2 | |
| 2.1.4 | 22 / 2 | |
| 2.1.3 | 22 / 2 | |
| 2.1.2 | 22 / 2 | |
| 2.1.1 | 22 / 2 | |
| 2.1.0 | 22 / 2 |
v2.12.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.11.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.10.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.9.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.8.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.7.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.