← Home

@astrojs/netlify

npm Repository Homepage
23
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

fredkschottmatthewp

Keywords

withastroastro-adapter

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@netlify/blobs AI (phantom-deps): Framework-scoped package loaded by convention in Netlify adapter; stable false positive for this package. ai

Versions (showing 23 of 23)

Version Deps Published
8.1.2 9 / 6
8.1.1 9 / 6
8.1.0 9 / 6
8.0.0 9 / 6
7.0.13 9 / 6
7.0.12 9 / 6
7.0.11 9 / 6
7.0.10 9 / 6
7.0.9 9 / 6
7.0.8 9 / 6
7.0.7 9 / 6
7.0.6 9 / 6
7.0.5 9 / 6
7.0.4 9 / 6
7.0.3 9 / 6
7.0.2 9 / 6
7.0.1 9 / 6
7.0.0 9 / 6
6.6.5 9 / 6
6.6.4 9 / 6
6.6.3 9 / 6
6.6.2 9 / 6
6.6.1 9 / 6

v8.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.