← Home

@brightspace-ui/testing

npm Repository Homepage

Utilities for testing front-end components and applications

55
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

d2l-travis-deploy

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from d2l-travis-deploy to GitHub Actions is a documented CI migration; SLSA provenance attestation confirms legitimate CI/CD build. ai
dependencies unvetted-dep:@web/dev-server AI (dependencies): Well-known @web toolchain package; stable for this testing utility. ai
dependencies unvetted-dep:@open-wc/testing AI (dependencies): Standard open-wc testing library; stable for this package. ai
dependencies unvetted-dep:@web/test-runner AI (dependencies): Well-known @web toolchain package; stable for this testing utility. ai
dependencies unvetted-dep:d2l-test-reporting AI (dependencies): D2L-owned reporting package; same org as this package. ai
dependencies unvetted-dep:@web/rollup-plugin-html AI (dependencies): Well-known @web toolchain package; stable for this testing utility. ai
dependencies unvetted-dep:@web/test-runner-commands AI (dependencies): Well-known @web toolchain package; stable for this testing utility. ai
dependencies unvetted-dep:@web/test-runner-playwright AI (dependencies): Well-known @web toolchain package; stable for this testing utility. ai
dependencies unvetted-dep:@brightspace-ui/intl AI (dependencies): Same Brightspace org; stable for this package. ai
phantom-deps phantom-dep:rollup AI (phantom-deps): rollup is a declared runtime dependency used in config files; stable false positive for this package. ai

Versions (showing 55 of 55)

Version Deps Published
1.50.0 17 / 8
1.49.0 17 / 8
1.48.1 17 / 8
1.47.0 17 / 8
1.46.0 17 / 8
1.45.0 17 / 8
1.44.2 17 / 8
1.44.1 17 / 8
1.44.0 17 / 8
1.43.0 17 / 8
1.42.0 17 / 8
1.39.2 17 / 8
1.39.1 17 / 8
1.38.2 17 / 8
1.38.1 17 / 8
1.38.0 17 / 8
1.36.1 17 / 7
1.34.0 17 / 7
1.33.0 17 / 7
1.32.1 17 / 7
1.32.0 17 / 7
1.31.7 18 / 7
1.31.6 18 / 7
1.31.5 18 / 7
1.31.4 18 / 7
1.31.3 18 / 7
1.31.2 18 / 7
1.31.1 18 / 7
1.31.0 18 / 7
1.30.1 18 / 7
1.30.0 18 / 7
1.29.0 18 / 7
1.28.2 18 / 7
1.28.1 18 / 7
1.28.0 18 / 7
1.27.0 18 / 7
1.26.1 18 / 7
1.26.0 18 / 11
1.25.1 18 / 11
1.25.0 18 / 7
1.24.3 18 / 7
1.24.2 18 / 7
1.24.1 18 / 7
1.24.0 18 / 7
1.23.0 18 / 7
1.22.0 18 / 7
1.21.1 18 / 7
1.21.0 18 / 7
1.20.0 18 / 7
1.19.0 18 / 7
1.18.0 18 / 7
1.17.0 17 / 7
1.16.3 17 / 7
1.16.2 17 / 7
1.16.1 17 / 7

v1.50.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.49.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.48.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.47.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.30.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.30.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.29.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.28.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.28.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.28.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.27.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.26.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.26.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.25.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.25.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.24.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.24.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.24.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.24.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.23.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.22.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.21.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.21.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.20.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.19.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.18.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.17.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.16.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.