@blue-quickjs/quickjs-wasm
11
Versions
—
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
No source commit
Maintainers
kamilgruszkam.jonak-bluepiotrblue
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@blue-quickjs/quickjs-wasm-build | AI (dependencies): Same-org monorepo dependency; SLSA provenance attestation covers the publish pipeline. | ai | |
| provenance | slsa-provenance | AI (provenance): Package consistently published via CI/CD with Sigstore attestation; stable signal for this package. | ai |