@wundergraph/playground
Cosmo Playground built on top of graphiql
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:axios | AI (phantom-deps): Bundled UI package; deps consumed at build time, not directly imported as modules. | ai | |
| phantom-deps | phantom-dep:dagre | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:lodash | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:graphql | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:prismjs | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:prettier | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:crypto-js | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:graphql-ws | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:change-case | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:react-icons | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:use-debounce | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:monaco-editor | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:react-move-hook | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:@heroicons/react | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:copy-to-clipboard | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:@monaco-editor/react | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-slot | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:prism-react-renderer | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai | |
| phantom-deps | phantom-dep:@radix-ui/react-icons | AI (phantom-deps): Bundled UI package; deps consumed at build time. | ai |
Versions (showing 5 of 5)
| Version | Deps | Published |
|---|---|---|
| 0.13.1 | 33 / 20 | |
| 0.13.0 | 33 / 20 | |
| 0.12.0 | 33 / 20 | |
| 0.11.1 | 33 / 20 | |
| 0.11.0 | 33 / 20 |
v0.13.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.11.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.11.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.