← Home

@visactor/vchart

npm Repository Homepage
4
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

liufangfangvisactorownerxuanhunzamhownchensiji.0517youngwindspurpose233ssfxzlixuefei.1313ray_sunxiaoluohesimaqxile611da730zhouxinyu66888zexian_chen

Keywords

chartsvisualizationVChartanimationstorytellingVisActorgraphicsinteraction

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern dormant-publish AI (publish-pattern): Version gap explained by major refactor; SLSA provenance and org-consistent deps confirm legitimate release. ai
semgrep semgrep:new-function-constructor AI (semgrep): Used in math expression formatter with pre-validation guard; stable pattern for this package. ai
dependencies unvetted-dep:@visactor/vdataset AI (dependencies): First-party @visactor org dependency; stable across versions. ai
dependencies unvetted-dep:@visactor/vlayouts AI (dependencies): First-party @visactor org dependency; stable across versions. ai
dependencies unvetted-dep:@visactor/vutils-extension AI (dependencies): First-party @visactor org dependency; stable across versions. ai

Versions (showing 4 of 4)

Version Deps Published
2.0.22 9 / 43
2.0.21 9 / 43
1.13.27 15 / 43
1.13.26 15 / 43

v2.0.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.13.27

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.13.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.