← Home

@algolia/client-common

51
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

haroenvshortcutseric-zahariaflufmarioalgoliasylvainmorgan-algolia2

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata no-description AI (npm-metadata): Minor metadata omission on an established @algolia scoped package; not a security signal. ai
phantom-deps phantom-dep:@algolia/requester-common AI (phantom-deps): Same-org dependency, re-exported or used transitively in the v4 architecture; normal for @algolia packages. ai

Versions (showing 51 of 151)

View all versions
Version Deps Published
5.56.0 0 / 8
5.55.2 0 / 8
5.55.1 0 / 8
5.55.0 0 / 8
5.54.1 0 / 8
5.54.0 0 / 8
5.53.0 0 / 8
5.52.1 0 / 8
5.52.0 0 / 8
5.51.0 0 / 8
5.50.2 0 / 8
5.50.1 0 / 8
5.50.0 0 / 8
5.49.2 0 / 8
5.49.1 0 / 8
5.49.0 0 / 8
5.48.2 0 / 8
5.48.1 0 / 8
5.46.0 0 / 8
5.45.0 0 / 8
5.44.0 0 / 8
5.43.0 0 / 8
5.42.0 0 / 8
5.41.0 0 / 8
5.40.1 0 / 8
5.40.0 0 / 8
5.39.0 0 / 8
5.38.0 0 / 8
5.37.0 0 / 8
5.36.0 0 / 8
5.35.0 0 / 8
5.34.1 0 / 8
5.34.0 0 / 8
5.33.0 0 / 8
5.32.0 0 / 8
5.31.0 0 / 8
5.30.0 0 / 8
5.29.0 0 / 8
5.28.0 0 / 8
5.27.0 0 / 8
5.26.0 0 / 8
5.25.0 0 / 8
5.24.0 0 / 8
5.23.4 0 / 8
5.23.3 0 / 8
5.23.2 0 / 8
5.23.1 0 / 8
5.23.0 0 / 8
5.22.0 0 / 8
5.21.0 0 / 8
5.20.4 0 / 8

v5.56.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.55.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.