@arcblock/did-connect-js
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Major version rewrite with build system changes; publisher has strong track record with no prior rejections. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Decodes a base64-encoded encryption key in a crypto utility function; standard pattern for this SDK. | ai |
Versions (showing 74 of 74)
| Version | Deps | Published |
|---|---|---|
| 4.1.11 | 13 / 19 | |
| 4.1.10 | 13 / 19 | |
| 4.1.9 | 13 / 19 | |
| 4.1.8 | 13 / 19 | |
| 4.1.7 | 13 / 19 | |
| 4.1.6 | 13 / 19 | |
| 4.1.5 | 13 / 19 | |
| 4.1.4 | 13 / 19 | |
| 4.1.3 | 13 / 19 | |
| 4.1.2 | 13 / 19 | |
| 4.1.1 | 13 / 19 | |
| 4.1.0 | 13 / 19 | |
| 4.0.7 | 13 / 19 | |
| 4.0.6 | 13 / 19 | |
| 4.0.5 | 13 / 19 | |
| 4.0.4 | 13 / 19 | |
| 4.0.3 | 13 / 19 | |
| 4.0.2 | 13 / 19 | |
| 4.0.1 | 13 / 18 | |
| 4.0.0 | 13 / 18 | |
| 1.30.1 | 12 / 13 | |
| 1.30.0 | 12 / 14 | |
| 1.29.27 | 12 / 14 | |
| 1.29.26 | 12 / 14 | |
| 1.29.25 | 12 / 14 | |
| 1.29.24 | 12 / 14 | |
| 1.29.23 | 12 / 14 | |
| 1.29.22 | 13 / 15 | |
| 1.29.21 | 13 / 15 | |
| 1.29.20 | 13 / 15 | |
| 1.29.19 | 13 / 15 | |
| 1.29.18 | 13 / 15 | |
| 1.29.17 | 13 / 15 | |
| 1.29.16 | 13 / 15 | |
| 1.29.15 | 13 / 15 | |
| 1.29.14 | 13 / 15 | |
| 1.29.13 | 13 / 14 | |
| 1.29.12 | 13 / 14 | |
| 1.29.11 | 13 / 14 | |
| 1.29.10 | 13 / 14 | |
| 1.29.9 | 13 / 14 | |
| 1.29.8 | 13 / 14 | |
| 1.29.7 | 13 / 14 | |
| 1.29.6 | 13 / 14 | |
| 1.29.5 | 13 / 14 | |
| 1.29.4 | 13 / 14 | |
| 1.29.3 | 13 / 14 | |
| 1.29.2 | 13 / 14 | |
| 1.29.1 | 13 / 14 | |
| 1.29.0 | 13 / 14 | |
| 1.28.9 | 13 / 7 | |
| 1.28.8 | 13 / 7 | |
| 1.28.7 | 13 / 7 | |
| 1.28.6 | 13 / 8 | |
| 1.28.5 | 13 / 8 | |
| 1.28.4 | 13 / 8 | |
| 1.28.3 | 13 / 8 | |
| 1.28.2 | 13 / 8 | |
| 1.28.1 | 13 / 8 | |
| 1.28.0 | 13 / 8 | |
| 1.27.16 | 13 / 8 | |
| 1.27.15 | 13 / 8 | |
| 1.27.14 | 13 / 8 | |
| 1.27.13 | 13 / 8 | |
| 1.27.12 | 13 / 8 | |
| 1.27.11 | 13 / 8 | |
| 1.27.10 | 13 / 8 | |
| 1.27.9 | 13 / 8 | |
| 1.27.8 | 13 / 8 | |
| 1.27.7 | 13 / 8 | |
| 1.27.6 | 13 / 8 | |
| 1.27.5 | 13 / 8 | |
| 1.27.4 | 13 / 8 | |
| 1.27.3 | 13 / 8 |
v4.1.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.10
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.9
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.