@workday/canvas-kit-styling-transform
The custom CSS in JS solution that takes JS styles and turns them into static CSS
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Workday migrated publishing to GitHub Actions CI/CD with SLSA provenance; this is a legitimate org-level change. | ai | |
| phantom-deps | phantom-dep:ts-node | AI (phantom-deps): ts-node is a build/config tool dependency; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@workday/canvas-tokens-web | AI (phantom-deps): Same-org scoped package used transitively; stable false positive. | ai |
Versions (showing 100 of 136)
| Version | Deps | Published |
|---|---|---|
| 15.1.4 | 6 / 2 | |
| 15.1.3 | 6 / 2 | |
| 15.1.2 | 6 / 2 | |
| 15.1.1 | 6 / 2 | |
| 15.1.0 | 6 / 2 | |
| 15.0.21 | 6 / 2 | |
| 15.0.20 | 6 / 2 | |
| 15.0.19 | 6 / 2 | |
| 15.0.18 | 6 / 2 | |
| 15.0.17 | 6 / 2 | |
| 15.0.16 | 6 / 2 | |
| 15.0.15 | 6 / 2 | |
| 15.0.14 | 6 / 2 | |
| 15.0.13 | 6 / 2 | |
| 15.0.12 | 6 / 2 | |
| 15.0.11 | 6 / 2 | |
| 15.0.9 | 6 / 2 | |
| 15.0.8 | 6 / 2 | |
| 15.0.7 | 6 / 2 | |
| 15.0.6 | 6 / 2 | |
| 15.0.5 | 6 / 2 | |
| 15.0.4 | 6 / 2 | |
| 15.0.3 | 6 / 2 | |
| 15.0.2 | 6 / 2 | |
| 15.0.1 | 6 / 2 | |
| 15.0.0 | 6 / 2 | |
| 14.3.17 | 6 / 2 | |
| 14.3.16 | 6 / 2 | |
| 14.3.15 | 6 / 2 | |
| 14.3.14 | 6 / 2 | |
| 14.3.13 | 6 / 2 | |
| 14.3.12 | 6 / 2 | |
| 14.3.11 | 6 / 2 | |
| 14.3.10 | 6 / 2 | |
| 14.3.9 | 6 / 2 | |
| 14.3.8 | 6 / 2 | |
| 14.3.7 | 6 / 2 | |
| 14.3.6 | 6 / 2 | |
| 14.3.5 | 6 / 2 | |
| 14.3.4 | 6 / 2 | |
| 14.3.3 | 6 / 2 | |
| 14.3.2 | 6 / 2 | |
| 14.3.1 | 6 / 2 | |
| 14.3.0 | 6 / 2 | |
| 14.2.37 | 6 / 2 | |
| 14.2.36 | 6 / 2 | |
| 14.2.35 | 6 / 2 | |
| 14.2.34 | 6 / 2 | |
| 14.2.33 | 6 / 2 | |
| 14.2.32 | 6 / 2 | |
| 14.2.31 | 6 / 2 | |
| 14.2.30 | 6 / 2 | |
| 14.2.29 | 6 / 2 | |
| 14.2.28 | 6 / 2 | |
| 14.2.27 | 6 / 2 | |
| 14.2.26 | 6 / 2 | |
| 14.2.25 | 6 / 2 | |
| 14.2.24 | 6 / 2 | |
| 14.2.23 | 6 / 2 | |
| 14.2.22 | 6 / 2 | |
| 14.2.21 | 6 / 2 | |
| 14.2.20 | 6 / 2 | |
| 14.2.19 | 6 / 2 | |
| 14.2.18 | 6 / 2 | |
| 14.2.17 | 6 / 2 | |
| 14.2.16 | 6 / 2 | |
| 14.2.15 | 6 / 2 | |
| 14.2.14 | 6 / 2 | |
| 14.2.13 | 6 / 2 | |
| 14.2.12 | 6 / 2 | |
| 14.2.11 | 6 / 2 | |
| 14.2.10 | 6 / 2 | |
| 14.2.9 | 6 / 2 | |
| 14.2.8 | 6 / 2 | |
| 14.2.7 | 6 / 2 | |
| 14.2.6 | 6 / 2 | |
| 14.2.5 | 6 / 2 | |
| 14.2.4 | 6 / 2 | |
| 14.2.3 | 6 / 2 | |
| 14.2.2 | 6 / 2 | |
| 14.2.1 | 6 / 2 | |
| 14.2.0 | 6 / 2 | |
| 14.1.28 | 6 / 2 | |
| 14.1.27 | 6 / 2 | |
| 14.1.26 | 6 / 2 | |
| 14.1.25 | 6 / 2 | |
| 14.1.24 | 6 / 2 | |
| 14.1.23 | 6 / 2 | |
| 14.1.22 | 6 / 2 | |
| 14.1.21 | 6 / 2 | |
| 14.1.20 | 6 / 2 | |
| 14.1.19 | 6 / 2 | |
| 14.1.10 | 6 / 2 | |
| 14.1.9 | 6 / 2 | |
| 14.1.8 | 6 / 2 | |
| 14.1.7 | 6 / 2 | |
| 14.1.6 | 6 / 2 | |
| 14.1.5 | 6 / 2 | |
| 14.1.4 | 6 / 2 | |
| 14.1.1 | 6 / 2 |
v15.1.4
1 findingPublished via CI/CD with a Sigstore attestation that VERIFIED against the pinned Sigstore trust root (predicate: https://slsa.dev/provenance/v1, issuer: https://token.actions.githubusercontent.com). The attestation's sha512 subject digest matches the tarball bytes we streamed, so it describes this exact artifact. This is the strongest supply chain integrity signal.
v15.1.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.1.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.1.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.1.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v15.0.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v14.3.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.