@yahoo/uds
Yahoo Universal System
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:qs | AI (typosquat): Scoped @yahoo/uds is Yahoo's design system; Levenshtein match to 'qs' is a false positive. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): uuid is a legitimate runtime dep in package.json for a design system; phantom detection is a false positive. | ai | |
| phantom-deps | phantom-dep:semver | AI (phantom-deps): semver is a legitimate runtime dep in package.json; phantom detection is a false positive. | ai |
Versions (showing 51 of 119)
| Version | Deps | Published |
|---|---|---|
| 3.163.2 | 19 / 33 | |
| 3.163.1 | 19 / 33 | |
| 3.163.0 | 19 / 33 | |
| 3.162.2 | 19 / 33 | |
| 3.162.1 | 19 / 33 | |
| 3.162.0 | 19 / 33 | |
| 3.161.0 | 19 / 33 | |
| 3.160.0 | 19 / 33 | |
| 3.159.2 | 19 / 33 | |
| 3.159.1 | 19 / 33 | |
| 3.159.0 | 19 / 33 | |
| 3.158.1 | 19 / 33 | |
| 3.158.0 | 19 / 33 | |
| 3.157.1 | 19 / 33 | |
| 3.157.0 | 19 / 33 | |
| 3.156.2 | 19 / 33 | |
| 3.156.1 | 19 / 33 | |
| 3.156.0 | 19 / 33 | |
| 3.155.0 | 19 / 33 | |
| 3.154.1 | 19 / 33 | |
| 3.154.0 | 19 / 33 | |
| 3.153.2 | 19 / 33 | |
| 3.153.1 | 19 / 33 | |
| 3.153.0 | 18 / 33 | |
| 3.152.1 | 18 / 33 | |
| 3.152.0 | 18 / 33 | |
| 3.151.0 | 18 / 33 | |
| 3.150.0 | 18 / 33 | |
| 3.149.0 | 18 / 33 | |
| 3.148.0 | 18 / 33 | |
| 3.147.0 | 18 / 33 | |
| 3.146.0 | 18 / 33 | |
| 3.145.0 | 18 / 33 | |
| 3.144.2 | 17 / 29 | |
| 3.144.1 | 17 / 29 | |
| 3.144.0 | 17 / 29 | |
| 3.143.0 | 17 / 29 | |
| 3.142.0 | 17 / 29 | |
| 3.141.0 | 17 / 29 | |
| 3.140.0 | 18 / 29 | |
| 3.139.0 | 18 / 29 | |
| 3.138.0 | 18 / 29 | |
| 3.137.2 | 18 / 29 | |
| 3.137.1 | 18 / 29 | |
| 3.137.0 | 18 / 29 | |
| 3.136.0 | 18 / 29 | |
| 3.135.0 | 18 / 29 | |
| 3.134.2 | 18 / 29 | |
| 3.134.1 | 18 / 29 | |
| 3.134.0 | 18 / 29 | |
| 3.133.3 | 18 / 29 |
v3.163.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.163.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.163.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.162.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.162.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.162.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.161.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.160.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.159.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.159.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.159.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.158.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.158.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.