@vkontakte/vk-bridge-react
React hooks for VK Bridge
5
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
vkcomk.egor.smirnovvkcom-publishercaptain__bamboopa.koshkingbowskyvitaliy.podlubnyakvkarelinsklv_rv.kirichenkovmeshcheadeltsarevaa.silkink.koropovskiya.belozerov
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): SLSA provenance attestation present; gitHead absence is compensated by Sigstore attestation from CI/CD. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): VKontakte org package with SLSA provenance; postinstall runs a local script for peer-dep validation, stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@swc/helpers | AI (phantom-deps): @swc/helpers is a known implicit runtime dep injected by SWC/rslib build tooling; not directly imported but legitimately required. | ai |