@acedatacloud/x402-client
X402 payment protocol client for AceDataCloud APIs
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): SLSA provenance attestation present; gitHead absence is not a meaningful risk when Sigstore attestation confirms CI/CD publish. | ai |
Versions (showing 29 of 29)
| Version | Deps | Published |
|---|---|---|
| 2026.726.1 | 0 / 4 | |
| 2026.726.0 | 0 / 4 | |
| 2026.722.0 | 0 / 4 | |
| 2026.721.0 | 0 / 4 | |
| 2026.718.0 | 0 / 4 | |
| 2026.716.0 | 0 / 4 | |
| 2026.708.0 | 0 / 4 | |
| 2026.613.0 | 0 / 4 | |
| 2026.531.5 | 0 / 4 | |
| 2026.531.4 | 0 / 4 | |
| 2026.531.3 | 0 / 4 | |
| 2026.531.2 | 0 / 3 | |
| 2026.531.1 | 0 / 3 | |
| 2026.531.0 | 0 / 3 | |
| 2026.507.2 | 0 / 3 | |
| 2026.507.1 | 0 / 3 | |
| 2026.507.0 | 0 / 3 | |
| 2026.425.1 | 0 / 3 | |
| 2026.425.0 | 0 / 3 | |
| 2026.424.0 | 0 / 3 | |
| 2026.420.5 | 0 / 3 | |
| 2026.420.4 | 0 / 3 | |
| 2026.420.3 | 0 / 3 | |
| 2026.420.2 | 0 / 3 | |
| 2026.420.1 | 0 / 3 | |
| 2026.420.0 | 0 / 3 | |
| 2026.4.20 | 0 / 3 | |
| 2026.4.19 | 0 / 3 | |
| 0.1.0 | 0 / 3 |
v2026.726.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.726.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.722.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.721.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.718.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.716.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.708.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.613.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.