← Home

@vuu-ui/vuu-layout

npm

VUU Layout Components

75
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

heswell

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): Trusted publisher with long track record; likely a publish environment change, not a supply chain risk. ai
dependencies unvetted-dep:@vuu-ui/vuu-filters AI (dependencies): Same-org monorepo sibling; versioned in lockstep with this package. ai
dependencies unvetted-dep:@vuu-ui/vuu-datatable AI (dependencies): Same-org monorepo sibling; versioned in lockstep with this package. ai
dependencies unvetted-dep:@vuu-ui/vuu-data-react AI (dependencies): Same-org monorepo sibling; versioned in lockstep with this package. ai
bogus-package bogus-package AI (bogus-package): Monorepo sub-package; sparse metadata is expected, not indicative of spam. ai
phantom-deps phantom-dep:@vuu-ui/vuu-datatable AI (phantom-deps): Same-org sibling dep; heuristic false positive for monorepo packages. ai
phantom-deps phantom-dep:@vuu-ui/vuu-table AI (phantom-deps): Same-org sibling dep; heuristic false positive for monorepo packages. ai
phantom-deps phantom-dep:@vuu-ui/vuu-popups AI (phantom-deps): Same-org sibling dep; heuristic false positive for monorepo packages. ai
phantom-deps phantom-dep:@vuu-ui/vuu-filters AI (phantom-deps): Same-org sibling dep; heuristic false positive for monorepo packages. ai

Versions (showing 75 of 75)

Version Deps Published
2.1.19 10 / 2
2.1.18 10 / 2
2.1.17 10 / 2
2.1.16 10 / 2
2.1.15 10 / 2
2.1.13 10 / 2
2.1.12 10 / 2
2.1.11 10 / 2
2.1.10 10 / 2
2.1.9 10 / 2
2.1.8 10 / 2
2.1.7 10 / 2
2.1.6 10 / 2
2.1.5 10 / 2
2.1.4 10 / 2
2.1.3 10 / 2
2.1.2 10 / 2
2.1.1 10 / 2
2.1.0 10 / 2
2.0.0 10 / 2
1.0.3 10 / 2
1.0.2 10 / 2
1.0.1 10 / 2
1.0.0 10 / 2
0.13.118 10 / 2
0.13.117 10 / 2
0.13.116 10 / 2
0.13.115 10 / 2
0.13.114 10 / 2
0.13.113 10 / 2
0.13.112 10 / 2
0.13.111 10 / 2
0.13.110 10 / 2
0.13.109 10 / 2
0.13.108 10 / 2
0.13.107 10 / 2
0.13.106 10 / 2
0.13.105 10 / 2
0.13.104 10 / 2
0.13.103 10 / 2
0.13.102 10 / 2
0.13.101 10 / 2
0.13.100 10 / 2
0.13.99 10 / 2
0.13.98 10 / 2
0.13.97 10 / 2
0.13.96 10 / 2
0.13.95 10 / 2
0.13.93 10 / 2
0.13.92 10 / 2
0.13.91 10 / 2
0.13.90 10 / 2
0.13.89 10 / 2
0.13.88 10 / 2
0.13.87 10 / 2
0.13.86 10 / 2
0.13.85 10 / 2
0.13.84 10 / 2
0.13.83 10 / 2
0.13.82 10 / 2
0.13.81 10 / 2
0.13.80 10 / 2
0.13.79 10 / 2
0.13.78 10 / 2
0.13.77 10 / 2
0.13.76 10 / 2
0.13.75 10 / 2
0.13.74 10 / 2
0.13.73 10 / 2
0.13.72 10 / 2
0.13.71 10 / 2
0.13.70 10 / 2
0.13.69 10 / 2
0.13.68 10 / 2
0.13.67 10 / 2

v2.1.19

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.18

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.