@arcanewizards/sigil
Application framework for A/V applications, built on-top of arcanejs
12
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
s0
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): GitHub Actions is the legitimate CI publisher for this org; SLSA attestation confirms supply chain integrity. | ai | |
| dependencies | unvetted-dep:@arcanejs/toolkit-frontend | AI (dependencies): Sibling package in the arcanejs ecosystem; consistent with the rest of the dependency set. | ai |