← Home

@weapp-tailwindcss/ui

npm Repository Homepage

Atomic utility-first CSS component library for WeChat mini programs.

11
Versions
ISC
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

icebreaker

Keywords

tailwindcssmini-programuicomponents

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata suspicious-initial-version AI (npm-metadata): Legitimate scoped package in established weapp-tailwindcss monorepo; 0.0.0 is an initial release, not a throwaway. ai
typosquat typosquat.levenshtein:uuid AI (typosquat): Scoped package @weapp-tailwindcss/ui; Levenshtein match on short suffix 'ui' is a false positive. ai
typosquat typosquat.levenshtein:pg AI (typosquat): Same false positive pattern — scoped package name, not a typosquat of pg. ai
typosquat typosquat.levenshtein:qs AI (typosquat): Same false positive pattern — scoped package name, not a typosquat of qs. ai
typosquat typosquat.levenshtein:joi AI (typosquat): Same false positive pattern — scoped package name, not a typosquat of joi. ai
typosquat typosquat.levenshtein:yup AI (typosquat): Same false positive pattern — scoped package name, not a typosquat of yup. ai

Versions (showing 11 of 11)

Version Deps Published
0.0.10 3 / 13
0.0.9 3 / 13
0.0.8 3 / 13
0.0.7 3 / 13
0.0.6 3 / 13
0.0.5 3 / 13
0.0.4 3 / 13
0.0.3 3 / 13
0.0.2 3 / 13
0.0.1 3 / 13
0.0.0 2 / 5

v0.0.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.