@certd/lib-huawei
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Versions (showing 17 of 17)
| Version | Deps | Published |
|---|---|---|
| 1.42.2 | 3 / 6 | |
| 1.42.0 | 3 / 6 | |
| 1.41.0 | 3 / 6 | |
| 1.40.3 | 3 / 6 | |
| 1.39.16 | 3 / 6 | |
| 1.39.1 | 3 / 4 | |
| 1.35.3 | 3 / 4 | |
| 1.34.1 | 3 / 4 | |
| 1.26.7 | 3 / 0 | |
| 1.25.8 | 3 / 0 | |
| 1.25.6 | 3 / 0 | |
| 1.25.5 | 3 / 0 | |
| 1.24.3 | 3 / 0 | |
| 1.24.2 | 3 / 0 | |
| 1.24.1 | 3 / 0 | |
| 1.22.1 | 3 / 0 | |
| 1.22.0 | 3 / 0 |
v1.42.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.42.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.26.7
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.25.8
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.25.6
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.25.5
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.24.3
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.24.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.24.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.22.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.22.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.