myst-demo
[](https://www.npmjs.com/package/myst-demo) [](https://github.com/jupyter-book/myst-theme/blob/main/LICENSE)
4
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
rowanc1stevejpurvescholdgrafebp-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:myst-config | AI (phantom-deps): Config-file reference pattern; stable for this package. | ai | |
| phantom-deps | phantom-dep:vfile-message | AI (phantom-deps): Config-file reference pattern; stable for this package. | ai | |
| phantom-deps | phantom-dep:myst-directives | AI (phantom-deps): Config-file reference pattern; stable for this package. | ai | |
| dependencies | unvetted-dep:myst-parser | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-to-tex | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-to-docx | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-to-html | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-to-jats | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-ext-card | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-ext-grid | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-ext-tabs | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-spec | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-to-typst | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-ext-proof | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-directives | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-ext-button | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-transforms | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-frontmatter | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-ext-exercise | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:myst-spec | AI (phantom-deps): Type/config-only usage; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-to-react | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-common | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:myst-config | AI (dependencies): Sibling myst-* package from jupyter-book ecosystem; stable false positive for this package. | ai |
Versions (showing 4 of 4)
| Version | Deps | Published |
|---|---|---|
| 1.3.1 | 27 / 1 | |
| 1.3.0 | 27 / 1 | |
| 1.1.2 | 27 / 1 | |
| 0.18.0 | 27 / 1 |
v1.3.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.3.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.1.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.18.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.