← Home

@workday/canvas-kit-styling

npm Repository Homepage

The custom CSS in JS solution that takes JS styles and turns them into static CSS

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

Verified SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

workday-canvas-kitmannycarrera4raisa.primerovaalanbsmithjaclynjessupjheddings

Keywords

canvascanvas-kitreactcomponentsworkdaystyling

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Workday migrated publishing to GitHub Actions CI/CD; confirmed by SLSA Sigstore attestation. Stable pattern for this package. ai

Versions (showing 51 of 138)

View all versions
Version Deps Published
15.1.4 2 / 6
15.1.3 2 / 6
15.1.2 2 / 6
15.1.1 2 / 6
15.1.0 2 / 6
15.0.21 2 / 6
15.0.20 2 / 6
15.0.19 2 / 6
15.0.18 2 / 6
15.0.17 2 / 6
15.0.16 2 / 6
15.0.15 2 / 6
15.0.14 2 / 7
15.0.13 2 / 7
15.0.12 2 / 7
15.0.11 2 / 7
15.0.9 2 / 7
15.0.8 2 / 7
15.0.7 2 / 7
15.0.6 2 / 7
15.0.5 2 / 7
15.0.4 2 / 7
15.0.3 2 / 7
15.0.2 2 / 7
15.0.1 2 / 7
15.0.0 2 / 7
14.3.17 2 / 7
14.3.16 2 / 7
14.3.15 2 / 7
14.3.14 2 / 7
14.3.13 2 / 7
14.3.12 2 / 7
14.3.11 2 / 7
14.3.10 2 / 7
14.3.9 2 / 7
14.3.8 2 / 7
14.3.7 2 / 7
14.3.6 2 / 7
14.3.5 2 / 7
14.3.4 2 / 7
14.3.3 2 / 7
14.3.2 2 / 7
14.3.1 2 / 7
14.3.0 2 / 7
14.2.37 2 / 7
14.2.36 2 / 7
14.2.35 2 / 7
14.2.34 2 / 7
14.2.33 2 / 7
14.2.32 2 / 7
14.2.31 2 / 7

v15.1.4

1 finding
INFO Has verified SLSA provenance attestation provenance

Published via CI/CD with a Sigstore attestation that VERIFIED against the pinned Sigstore trust root (predicate: https://slsa.dev/provenance/v1, issuer: https://token.actions.githubusercontent.com). The attestation's sha512 subject digest matches the tarball bytes we streamed, so it describes this exact artifact. This is the strongest supply chain integrity signal.

v15.1.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v15.0.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.3.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.