feat(muxes): model overrides matcher #220
Conversation
Minder Vulnerability Report ✅Minder analyzed this PR and found it does not add any new vulnerable dependencies.
|
![stacklok-cloud-staging[bot]](https://avatars.githubusercontent.com/u/110237746?s=60&v=4){kind=small}
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @dnd-kit/accessibility
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.4 |
| Repository activity | 7 |
| User activity | 8 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 12 |
| Number of git tags or releases | 121 |
| Versions matched to tags or releases | 8 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @reach/visually-hidden | 0 | |
| @react-aria/visually-hidden | 0 |
📦 Dependency: @dnd-kit/core
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.4 |
| Repository activity | 7 |
| User activity | 8 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 134 |
| Number of git tags or releases | 128 |
| Versions matched to tags or releases | 41 |
Alternatives
| Package | Score | Description |
|---|---|---|
| react-dnd | 0 |
📦 Dependency: @dnd-kit/sortable
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.4 |
| Repository activity | 7 |
| User activity | 8 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 106 |
| Number of git tags or releases | 125 |
| Versions matched to tags or releases | 21 |
📦 Dependency: @dnd-kit/utilities
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.4 |
| Repository activity | 7 |
| User activity | 8 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 87 |
| Number of git tags or releases | 88 |
| Versions matched to tags or releases | 12 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @dnd-kit/core | 0 | |
| @dnd-kit/sortable | 0 |
📦 Dependency: uuid
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.7 |
| Repository activity | 6 |
| User activity | 9.4 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 45 |
| Number of git tags or releases | 48 |
| Versions matched to tags or releases | 29 |
Alternatives
| Package | Score | Description |
|---|---|---|
| uuid-1345 | 0 | |
| uuid-random | 0 |
Pull Request Test Coverage Report for Build 13031292266Details
💛 - Coveralls |
|
Using this task #278 |
Added matcher and sortable to model overrides
Kapture.2025-01-28.at.17.33.01.mp4