@vitessce/spatial-beta
The intention behind `spatial-beta` and `layer-controller-beta` is to be able to develop them alongside the existing `spatial` and `layerController` views, allowing both implementations to exist simultaneously while the beta implementations stabilize.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:short-number | AI (dependencies): short-number is a trivial formatting utility; also flagged as phantom dep (not directly imported) in this package. | ai | |
| dependencies | unvetted-dep:@vitessce/scatterplot | AI (dependencies): Sibling package in the vitessce monorepo; same versioned release. | ai | |
| dependencies | unvetted-dep:@vitessce/spatial-three | AI (dependencies): Sibling package in the vitessce monorepo; same versioned release. | ai | |
| dependencies | unvetted-dep:@vitessce/spatial-accelerated | AI (dependencies): Sibling package in the vitessce monorepo; same versioned release. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Internal monorepo sub-package; sparse README and no keywords are expected for this type of package. | ai | |
| dependencies | unvetted-dep:@vitessce/utils | AI (dependencies): Sibling package in the vitessce monorepo; same versioned release. | ai | |
| phantom-deps | phantom-dep:mathjs | AI (phantom-deps): Declared dep in monorepo package; may be used transitively or in bundled output. | ai | |
| phantom-deps | phantom-dep:short-number | AI (phantom-deps): Declared dep in monorepo package; may be used transitively or in bundled output. | ai | |
| phantom-deps | phantom-dep:@vitessce/styles | AI (phantom-deps): Sibling monorepo package; phantom-dep heuristic unreliable for CSS/style imports. | ai | |
| phantom-deps | phantom-dep:plur | AI (phantom-deps): Declared dep in monorepo package; may be used transitively or in bundled output. | ai |
v3.9.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.9.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v3.9.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.