← Home

@appium/types

npm Repository Homepage

Various type declarations used across Appium

13
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

jlippsnick.mokhnachkazucocoa

Keywords

androidautomationfirefoxosiosjavascriptseleniumtestingwebdriver

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher (jlipps) to GitHub Actions CI/CD with SLSA provenance. This is a security improvement for the official @appium org. ai
publish-pattern dormant-publish AI (publish-pattern): Type declaration package with infrequent updates. SLSA provenance confirms legitimate build from official appium/appium repo. ai
dependencies unvetted-dep:@appium/schema AI (dependencies): @appium/schema is a first-party Appium monorepo package; unvetted status is a registry artifact, not a security concern. ai
dependencies unvetted-dep:@appium/tsconfig AI (dependencies): @appium/tsconfig is a first-party Appium monorepo package used for TypeScript configuration; unvetted status is a registry artifact. ai
phantom-deps phantom-dep:@appium/tsconfig AI (phantom-deps): @appium/tsconfig is a build-time TypeScript config tool from the same org; not being directly imported at runtime is expected behavior for this package type. ai

Versions (showing 13 of 13)

Version Deps Published
1.6.0 2 / 2
1.5.1 2 / 2
1.5.0 4 / 0
1.4.0 4 / 0
1.3.1 4 / 0
1.3.0 4 / 0
1.2.1 4 / 0
1.2.0 4 / 0
1.1.2 4 / 0
1.1.1 4 / 0
1.1.0 4 / 0
1.0.1 4 / 0
1.0.0 4 / 0

v1.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.