@graphiql/react
[Changelog](https://github.com/graphql/graphiql/blob/main/packages/graphiql-react/CHANGELOG.md) | [API Docs](https://graphiql-test.netlify.app/typedoc/modules/graphiql_react.html) | [NPM](https://www.npmjs.com/package/@graphiql/react)
33
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
benjiemjmahoneleebyroni1gacao
Keywords
reactgraphqlsdkmonaco-editormonaco-graphqlmonaco
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Moved to GitHub Actions CI/CD publishing with SLSA provenance; stable for this package. | ai | |
| phantom-deps | phantom-dep:@types/codemirror | AI (phantom-deps): TypeScript types for codemirror; framework-scoped convention, stable for this package. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-tooltip | AI (dependencies): @radix-ui/react-tooltip is a canonical Radix UI primitive; legitimate and widely trusted dependency. | ai | |
| dependencies | unvetted-dep:markdown-it | AI (dependencies): markdown-it is a widely-used, well-maintained Markdown parser; legitimate dependency for a GraphQL IDE component library. | ai | |
| bogus-package | bogus-package | AI (bogus-package): The S_KNOWN_SPAM_PUBLISHER signal references leebyron (Lee Byron, GraphQL co-creator). This is a false positive; the package is part of the official graphql/graphiql monorepo. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-dropdown-menu | AI (dependencies): @radix-ui/react-dropdown-menu is a canonical Radix UI primitive; legitimate and widely trusted dependency. | ai | |
| dependencies | unvetted-dep:@radix-ui/react-dialog | AI (dependencies): @radix-ui/react-dialog is a canonical Radix UI primitive used throughout the React ecosystem; no security concern. | ai |