← Home

@capacitor/app

6
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

itschacedionicjsjcesarmobilevmfojpenderdtarnawskymark-ionicalexgerardojacintoos-pedrobilroharvdoggyjpender-osndrkepatotorui.mendesmarkemercapacitor-plugin-boteric-ionicos-ruialves

Keywords

capacitorpluginnative

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:hapi AI (typosquat): Scoped @capacitor/app is the official Ionic plugin; no relation to hapi. ai
typosquat typosquat.levenshtein:pg AI (typosquat): Scoped @capacitor/app is the official Ionic plugin; no relation to pg. ai
typosquat typosquat.levenshtein:yup AI (typosquat): Scoped @capacitor/app is the official Ionic plugin; no relation to yup. ai
typosquat typosquat.levenshtein:ajv AI (typosquat): Scoped @capacitor/app is the official Ionic plugin; no relation to ajv. ai

Versions (showing 6 of 6)

Version Deps Published
8.1.0 0 / 15
8.0.1 0 / 15
8.0.0 0 / 15
7.1.2 0 / 15
7.1.1 0 / 15
6.0.3 0 / 14

v8.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v8.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v7.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v6.0.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.