← Home

@algolia/monitoring

100
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

haroenvtkruggsarahdayancyril.descossyalgabetalg-bgastinneemmanuel.fortinrobertmogosjinsteeventexperiences_algoliaalg-adminsarahdayanalgoliamorgan-algolia2fluferic-zahariasylvainmarioalgoliashortcuts

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Package migrated to GitHub Actions CI/CD publishing with SLSA provenance attestation — a legitimate and encouraged supply chain improvement for the Algolia org. ai
provenance slsa-provenance AI (provenance): SLSA provenance attestation via Sigstore confirms CI/CD publishing integrity; stable positive signal for this package. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy followed by GitHub Actions migration with SLSA attestation and no material code changes is consistent with legitimate org-level workflow modernization, not takeover. ai
dependencies unvetted-dep:@algolia/client-common AI (dependencies): First-party Algolia dependency from the same monorepo, published in lockstep. Not a third-party or suspicious dependency. ai
dependencies unvetted-dep:@algolia/requester-browser-xhr AI (dependencies): First-party Algolia dependency from the same monorepo, published in lockstep. Not a third-party or suspicious dependency. ai
dependencies unvetted-dep:@algolia/requester-fetch AI (dependencies): First-party Algolia dependency from the same monorepo, published in lockstep. Not a third-party or suspicious dependency. ai
dependencies unvetted-dep:@algolia/requester-node-http AI (dependencies): First-party Algolia dependency from the same monorepo, published in lockstep. Not a third-party or suspicious dependency. ai

Versions (showing 100 of 102)

Version Deps Published
1.56.0 4 / 6
1.55.2 4 / 6
1.55.1 4 / 6
1.55.0 4 / 6
1.54.1 4 / 6
1.54.0 4 / 6
1.53.0 4 / 6
1.52.1 4 / 6
1.52.0 4 / 6
1.51.0 4 / 6
1.50.2 4 / 6
1.50.1 4 / 6
1.50.0 4 / 6
1.49.2 4 / 6
1.49.1 4 / 6
1.49.0 4 / 6
1.48.2 4 / 6
1.48.1 4 / 6
1.48.0 4 / 6
1.47.0 4 / 6
1.46.4 4 / 6
1.46.3 4 / 6
1.46.2 4 / 6
1.46.1 4 / 6
1.46.0 4 / 6
1.45.0 4 / 6
1.44.0 4 / 6
1.43.0 4 / 6
1.42.0 4 / 6
1.41.0 4 / 6
1.40.1 4 / 6
1.40.0 4 / 6
1.39.0 4 / 6
1.38.0 4 / 6
1.37.0 4 / 6
1.36.0 4 / 6
1.35.0 4 / 6
1.34.1 4 / 6
1.34.0 4 / 6
1.33.0 4 / 6
1.32.0 4 / 6
1.31.0 4 / 6
1.30.0 4 / 6
1.29.0 4 / 6
1.28.0 4 / 6
1.27.0 4 / 6
1.26.0 4 / 6
1.25.0 4 / 6
1.24.0 4 / 6
1.23.4 4 / 6
1.23.3 4 / 6
1.23.2 4 / 6
1.23.1 4 / 6
1.23.0 4 / 6
1.22.0 4 / 6
1.21.0 4 / 6
1.20.4 4 / 6
1.20.3 4 / 6
1.20.2 4 / 6
1.20.1 4 / 6
1.20.0 4 / 6
1.19.0 4 / 6
1.18.0 4 / 6
1.17.1 4 / 6
1.17.0 4 / 6
1.16.0 4 / 6
1.15.0 4 / 6
1.14.2 4 / 6
1.14.1 4 / 6
1.14.0 4 / 6
1.13.0 4 / 6
1.12.0 4 / 6
1.11.0 4 / 6
1.10.2 4 / 6
1.10.1 4 / 6
1.10.0 4 / 6
1.9.1 4 / 6
1.9.0 4 / 6
1.8.1 4 / 6
1.8.0 4 / 6
1.7.0 4 / 6
1.6.1 4 / 6
1.6.0 4 / 6
1.5.3 4 / 6
1.5.2 4 / 6
1.5.1 4 / 6
1.5.0 4 / 6
1.4.3 4 / 6
1.4.1 4 / 6
1.4.0 4 / 6
1.3.2 3 / 6
1.3.1 3 / 6
1.3.0 3 / 6
1.2.5 3 / 6
1.2.4 3 / 3
1.2.3 3 / 3
1.2.2 3 / 3
1.2.1 3 / 3
1.1.1 3 / 3
1.1.0 3 / 3
Showing 100 of 102 Next page →

v1.56.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.55.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.