← Home

@workday/canvas-kit-react

npm Repository Homepage

The parent module that contains all Workday Canvas Kit React components

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

workday-canvas-kitmannycarrera4raisa.primerovaalanbsmithjaclynjessupjheddingssheelah

Keywords

canvascanvas-kitreactcomponentsworkday

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/commonjs/pill/lib/Pill.js AI (source-diff): Long lines are inlined CSS-in-JS style strings from canvas-kit-styling; not obfuscation. Stable pattern for this package. ai
source-diff obfuscated-file:dist/es6/pill/lib/Pill.js AI (source-diff): Same CSS-in-JS build artifact pattern; not obfuscation. Stable for this package. ai
semgrep semgrep:api-obfuscation-reflect AI (semgrep): Used in a documented object proxy/theming utility; standard JS Proxy pattern, not obfuscation. ai
phantom-deps phantom-dep:@workday/canvas-kit-preview-react AI (phantom-deps): Same org scope (@workday); declared as dep, likely used in dist bundle rather than direct import. ai

Versions (showing 51 of 117)

View all versions
Version Deps Published
15.1.3 18 / 2
15.1.1 18 / 2
15.1.0 18 / 2
15.0.21 18 / 2
15.0.20 18 / 2
15.0.19 18 / 2
15.0.18 18 / 2
15.0.17 18 / 2
15.0.16 18 / 2
15.0.15 18 / 2
15.0.14 19 / 2
15.0.13 19 / 2
15.0.12 19 / 2
15.0.11 19 / 2
15.0.9 19 / 2
15.0.8 19 / 2
15.0.7 19 / 2
15.0.6 19 / 2
15.0.5 19 / 2
15.0.4 19 / 2
15.0.3 19 / 2
15.0.2 19 / 2
15.0.1 19 / 2
15.0.0 19 / 2
14.3.17 18 / 2
14.3.16 18 / 2
14.3.15 18 / 2
14.3.14 18 / 2
14.3.13 18 / 2
14.3.12 18 / 2
14.3.11 18 / 2
14.3.10 18 / 2
14.3.9 18 / 2
14.3.8 18 / 2
14.3.7 18 / 2
14.3.6 18 / 2
14.3.5 18 / 2
14.3.4 18 / 2
14.3.3 18 / 2
14.3.2 18 / 2
14.3.1 18 / 2
14.3.0 18 / 2
14.2.37 18 / 2
14.2.36 18 / 2
14.2.35 18 / 2
14.2.34 18 / 2
14.2.33 18 / 2
14.2.32 18 / 2
14.2.31 18 / 2
14.2.30 18 / 2
14.2.29 18 / 2

v15.1.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.3.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.37

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.36

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.35

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.34

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.33

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.32

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.31

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.30

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.29

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.