@yahoo/uds-icons
Yahoo Universal System Icons
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/icons/Cold.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/Dreary.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/Hot.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/IntermittentCloudsNight.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/IntermittentCloudsSunny.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/MostlyCloudyNight.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/PartlyCloudyNight.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/PartlyFlurries.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/PartlyNightFlurries.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/PartlySunny.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/Sleet.cjs | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/Cold.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/Dreary.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/Hot.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/IntermittentCloudsNight.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/IntermittentCloudsSunny.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/MostlyCloudyNight.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/PartlyCloudyNight.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/PartlyFlurries.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/icons/PartlyNightFlurries.js | AI (source-diff): Minified React icon component with Yahoo copyright; not obfuscated malware. | ai |
Versions (showing 17 of 17)
| Version | Deps | Published |
|---|---|---|
| 2.44.0 | 0 / 16 | |
| 2.43.0 | 0 / 16 | |
| 2.42.0 | 0 / 16 | |
| 2.41.0 | 0 / 16 | |
| 2.40.0 | 0 / 16 | |
| 2.39.1 | 0 / 16 | |
| 2.39.0 | 0 / 16 | |
| 2.24.0 | 0 / 15 | |
| 2.23.0 | 0 / 15 | |
| 2.6.0 | 0 / 10 | |
| 2.5.0 | 0 / 10 | |
| 2.4.1 | 0 / 10 | |
| 2.3.1 | 0 / 10 | |
| 2.1.2 | 0 / 10 | |
| 2.1.1 | 0 / 10 | |
| 2.1.0 | 0 / 10 | |
| 2.0.0 | 0 / 10 |
v2.24.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.23.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.