← Home

@visactor/vchart-extension

23
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

liufangfangvisactorownerxuanhunzamhownchensiji.0517youngwindspurpose233ssfxzlixuefei.1313ray_sunxiaoluohesimaqxile611da730zhouxinyu66888zexian_chen

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern new-deps-added AI (publish-pattern): New deps are same-org @visactor packages added as part of v2 major release refactor. ai
dependencies unvetted-dep:@visactor/vlayouts AI (dependencies): Same-org @visactor package; consistent with the broader VChart ecosystem dependency pattern. ai
provenance no-provenance AI (provenance): Large established org package; lack of provenance is common and not a risk signal here. ai
phantom-deps phantom-dep:@visactor/vchart AI (phantom-deps): Same-org peer dependency pattern; stable for this package. ai
bogus-package bogus-package AI (bogus-package): Extension wrapper package in a large org monorepo; tiny payload and missing metadata are expected for this type of package. ai
phantom-deps phantom-dep:@visactor/vutils AI (phantom-deps): Same-org peer dependency pattern; stable for this package. ai
phantom-deps phantom-dep:@visactor/vrender-core AI (phantom-deps): Same-org peer dependency pattern; stable for this package. ai
phantom-deps phantom-dep:@visactor/vrender-kits AI (phantom-deps): Same-org transitive dep; stable false positive for this package. ai
phantom-deps phantom-dep:@visactor/vlayouts AI (phantom-deps): Same-org transitive dep; stable false positive for this package. ai
phantom-deps phantom-dep:@visactor/vrender-components AI (phantom-deps): Same-org transitive dep; stable false positive for this package. ai
phantom-deps phantom-dep:@visactor/vrender-animate AI (phantom-deps): Same-org transitive dep; stable false positive for this package. ai
phantom-deps phantom-dep:@visactor/vdataset AI (phantom-deps): Same-org transitive dep; not directly imported but legitimately declared for peer resolution. ai

Versions (showing 23 of 23)

Version Deps Published
2.1.0 8 / 24
2.0.22 8 / 24
2.0.21 8 / 24
2.0.20 8 / 24
2.0.19 8 / 24
2.0.14 8 / 24
2.0.13 8 / 24
2.0.12 8 / 24
2.0.11 8 / 24
2.0.8 8 / 24
2.0.6 8 / 24
2.0.5 8 / 24
2.0.4 8 / 24
2.0.3 8 / 24
2.0.2 8 / 24
2.0.1 8 / 24
2.0.0 8 / 24
1.13.27 8 / 24
1.13.26 8 / 24
1.13.25 8 / 24
1.13.24 8 / 24
1.13.23 8 / 24
1.13.22 8 / 24