← Home

@adobe/helix-html-pipeline

npm Repository Homepage

Helix HTML Pipeline

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

marbectripodgarthdblazdadobe-adminpatrickfultontrieloffkrisnyedcpfsdknatebaldwindevongovettaspro83symanovidpfisterstefan-guggisbergrofekptdobeadobehallsfullcolorcoderdjaeggidylandepassmhaackamol-anandstopp-adobenamaroradotenduh_schmidtasthabh23zdahbituicufmeschbe

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Adobe package publishing via GitHub Actions with SLSA attestation; legitimate CI/CD migration, stable for this package. ai
dependencies unvetted-dep:mdast-util-to-string AI (dependencies): mdast-util-to-string is a well-known unified ecosystem package; stable false positive for this package. ai

Versions (showing 51 of 134)

View all versions
Version Deps Published
6.29.9 26 / 21
6.29.8 26 / 21
6.29.6 26 / 21
6.29.5 26 / 21
6.29.4 26 / 21
6.29.3 26 / 21
6.29.2 26 / 21
6.29.1 26 / 21
6.28.6 26 / 21
6.28.3 26 / 21
6.28.2 26 / 21
6.28.1 26 / 21
6.28.0 26 / 21
6.27.30 26 / 21
6.27.29 26 / 21
6.27.28 26 / 21
6.27.27 26 / 21
6.27.26 26 / 21
6.27.25 26 / 21
6.27.24 26 / 21
6.27.23 26 / 21
6.27.22 26 / 21
6.27.21 26 / 21
6.27.20 26 / 21
6.27.19 26 / 21
6.27.18 26 / 21
6.27.17 26 / 21
6.27.16 26 / 21
6.27.15 26 / 21
6.27.14 26 / 21
6.27.13 26 / 21
6.27.12 26 / 21
6.27.11 26 / 21
6.27.10 26 / 21
6.27.9 26 / 21
6.27.8 26 / 21
6.27.7 26 / 21
6.27.6 26 / 21
6.27.5 26 / 21
6.27.4 26 / 21
6.27.3 26 / 21
6.27.2 26 / 21
6.27.1 26 / 21
6.27.0 26 / 21
6.26.8 26 / 21
6.26.7 26 / 21
6.26.6 26 / 21
6.26.5 26 / 21
6.26.4 26 / 21
6.26.3 26 / 21
6.26.2 26 / 21

v6.29.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.29.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.