@ajna-inc/npmvc @0.1.1
Apache-2.0
License
No
Install Scripts
11
Dependencies
4
Dev Dependencies
96.0 KB
Package Size
Published
Verifiable-credential supply chain compliance for npm. Sign attestations, verify dependencies, revoke compromised packages.
Maintainers
vinaysingh8866
Keywords
supply-chainsecuritynpmverifiable-credentialsdidattestationsbomprovenancesigningverification
Dependencies (11)
| Package | Constraint | Registry Status |
|---|---|---|
| tar | ^7.4.3 | auto_approved |
| zod | ^3.23.8 | auto_approved |
| jose | ^5.9.6 | No greenflagged match |
| yaml | ^2.6.1 | auto_approved |
| commander | ^12.1.0 | auto_approved |
| picocolors | ^1.1.1 | auto_approved |
| canonicalize | ^2.0.0 | No greenflagged match |
| multiformats | ^13.3.1 | auto_approved |
| @noble/hashes | ^1.6.1 | auto_approved |
| @noble/ed25519 | ^2.2.3 | auto_approved |
| @cyclonedx/cyclonedx-npm | 4.2.1 | auto_approved |
Dev Dependencies (4)
| Package | Constraint | Registry Status |
|---|---|---|
| tsx | ^4.19.2 | auto_approved |
| @types/tar | ^6.1.13 | auto_approved |
| typescript | ^5.7.2 | auto_approved |
| @types/node | ^22.10.2 | auto_approved |
Transitive Dependency Tree
33 transitive deps
max depth 5
├─
@cyclonedx/cyclonedx-npm
4.2.1
→ 4.2.1
├─
@noble/ed25519
^2.2.3
→ 2.3.0
├─
@noble/hashes
^1.6.1
→ 1.8.0
├─
canonicalize
^2.0.0
├─
commander
^12.1.0
→ 12.1.0
├─
jose
^5.9.6
├─
multiformats
^13.3.1
→ 13.4.2
├─
picocolors
^1.1.1
→ 1.1.1
├─
tar
^7.4.3
→ 7.5.16
├─
yaml
^2.6.1
→ 2.8.4
├─
zod
^3.23.8
→ 3.25.76
├─
@cyclonedx/cyclonedx-library
^10.0.0
→ 10.0.0
├─
@isaacs/fs-minipass
^4.0.0
→ 4.0.1
├─
chownr
^3.0.0
→ 3.0.0
├─
commander
^14.0.0
→ 14.0.3
├─
minipass
^7.1.2
→ 7.1.3
├─
minizlib
^3.1.0
→ 3.1.0
├─
normalize-package-data
^7.0.0 || ^8.0.0
→ 8.0.0
├─
packageurl-js
^2.0.1
→ 2.0.1
├─
spdx-expression-parse
^3.0.1 || ^4.0.0
→ 4.0.0
├─
xmlbuilder2
^3.0.2 || ^4.0.3
→ 4.0.3
├─
yallist
^5.0.0
→ 5.0.0
├─
@oozcitak/dom
^2.0.2
├─
@oozcitak/infra
^2.0.2
├─
@oozcitak/util
^10.0.0
├─
hosted-git-info
^9.0.0
→ 9.0.3
├─
js-yaml
^4.1.1
→ 4.2.0
├─
minipass
^7.0.4
→ 7.1.3
├─
minipass
^7.1.2
→ 7.1.3
├─
semver
^7.3.5
→ 7.8.4
├─
spdx-exceptions
^2.1.0
→ 2.5.0
├─
spdx-license-ids
^3.0.0
→ 3.0.23
├─
validate-npm-package-license
^3.0.4
→ 3.0.4
├─
argparse
^2.0.1
→ 2.0.1
├─
lru-cache
^11.1.0
→ 11.5.1
├─
spdx-correct
^3.0.0
→ 3.2.0
├─
spdx-expression-parse
^3.0.0
├─
spdx-expression-parse
^3.0.0
├─
spdx-license-ids
^3.0.0
→ 3.0.23
Changes from v0.1.0
No metadata changes detected.
File Changes
0 added
0 removed
9 modified
size delta: +3.6 KB
Published to npm: