← Home

@ankhorage/contracts

npm Repository Homepage

Serializable app, action, and theme config contracts for Ankhorage.

42
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

artiphishle

Keywords

typescriptcontractsschemamanifestauthsecretssecret-storestorageadapter

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI/CD is confirmed by SLSA provenance attestation; legitimate automation handoff. ai
source-diff source-size-tripled AI (source-diff): Size increase from 8KB to 27KB is modest in absolute terms and consistent with adding compiled TypeScript dist files. ai

Versions (showing 42 of 42)

Version Deps Published
4.0.0 1 / 6
3.0.0 1 / 6
2.1.0 1 / 6
2.0.0 1 / 6
1.19.4 1 / 5
1.19.3 1 / 5
1.19.2 1 / 5
1.19.1 1 / 5
1.19.0 1 / 5
1.18.3 1 / 5
1.18.2 1 / 5
1.18.1 1 / 5
1.18.0 1 / 5
1.17.0 1 / 5
1.15.0 1 / 5
1.14.0 1 / 5
1.13.0 1 / 5
1.12.0 1 / 5
1.11.0 1 / 5
1.10.0 1 / 5
1.9.0 1 / 5
1.8.0 1 / 5
1.7.0 1 / 5
1.6.0 1 / 5
1.5.0 1 / 5
1.4.0 1 / 5
1.3.1 1 / 5
1.3.0 1 / 5
1.2.0 1 / 5
1.1.1 1 / 5
1.1.0 1 / 5
1.0.0 0 / 5
0.3.2 0 / 5
0.3.1 0 / 5
0.3.0 0 / 5
0.2.0 0 / 5
0.1.3 0 / 5
0.1.2 0 / 5
0.0.4 1 / 5
0.0.3 1 / 5
0.0.2 1 / 5
0.0.1 0 / 8

v4.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.19.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.19.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.19.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.19.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.19.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.