← Home

@radix-ui/react-slot

View docs [here](https://radix-ui.com/primitives/docs/utilities/slot).

25
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

benoitgrelardstephenhaneyandy-hookhadihallakchancestricklandmark-workos

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): jjenzz is a known Radix UI maintainer; legitimate team rotation. ai
maintainer-change maintainer-added AI (maintainer-change): All added maintainers are known Radix UI team members. ai
publish-pattern new-deps-added AI (publish-pattern): @babel/runtime is a standard build dependency for this package. ai
provenance no-provenance AI (provenance): Package predates Sigstore provenance by years; absence is expected for this vintage of Radix UI releases. ai
npm-metadata no-description AI (npm-metadata): Early Radix UI primitive packages omit descriptions; this is a known pattern for this legitimate package family, not a malicious indicator. ai
bogus-package bogus-package AI (bogus-package): @radix-ui/react-slot is a legitimate Radix UI primitive; spam signals are false positives for this well-established open-source package. ai

Versions (showing 25 of 25)

Show 1 prerelease
Version Deps Published
1.2.4 1 / 9
1.2.3 1 / 9
1.2.1 1 / 9
1.2.0 1 / 8
1.1.2 1 / 8
1.1.1 1 / 0
1.1.0 1 / 0
1.0.2 2 / 0
1.0.1 2 / 0
1.0.0 2 / 0
0.1.2 2 / 0
0.1.1 2 / 0
0.1.0 2 / 0
0.0.12 2 / 0
0.0.11 2 / 0
0.0.10 3 / 0
0.0.9 3 / 0
0.0.8 3 / 0
0.0.7 3 / 0
0.0.6 3 / 0
0.0.5 3 / 0
0.0.4 2 / 0
0.0.3 1 / 0
0.0.2 1 / 0
0.0.1 1 / 0