@chain-registry/cli
Chain Registry CLI
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @chain-registry/cli is a legitimate Cosmos chain-registry CLI tool with no relation to 'joi'. Levenshtein match is a superficial false positive. | ai | |
| dependencies | unvetted-dep:@chain-registry/workflows | AI (dependencies): First-party dependency within the same @chain-registry namespace, published by the same trusted maintainer (pyramation). | ai | |
| dependencies | unvetted-dep:@chain-registry/interfaces | AI (dependencies): First-party dependency within the same @chain-registry namespace, published by the same trusted maintainer (pyramation). | ai |
Versions (showing 51 of 552)
| Version | Deps | Published |
|---|---|---|
| 1.53.389 | 5 / 0 | |
| 1.53.388 | 5 / 0 | |
| 1.53.387 | 5 / 0 | |
| 1.53.386 | 5 / 0 | |
| 1.53.385 | 5 / 0 | |
| 1.53.384 | 5 / 0 | |
| 1.53.383 | 5 / 0 | |
| 1.53.382 | 5 / 0 | |
| 1.53.381 | 5 / 0 | |
| 1.53.380 | 5 / 0 | |
| 1.53.379 | 5 / 0 | |
| 1.53.378 | 5 / 0 | |
| 1.53.377 | 5 / 0 | |
| 1.53.376 | 5 / 0 | |
| 1.53.375 | 5 / 0 | |
| 1.53.374 | 5 / 0 | |
| 1.53.373 | 5 / 0 | |
| 1.53.372 | 5 / 0 | |
| 1.53.371 | 5 / 0 | |
| 1.53.370 | 5 / 0 | |
| 1.53.369 | 5 / 0 | |
| 1.53.368 | 5 / 0 | |
| 1.53.367 | 5 / 0 | |
| 1.53.366 | 5 / 0 | |
| 1.53.365 | 5 / 0 | |
| 1.53.364 | 5 / 0 | |
| 1.53.363 | 5 / 0 | |
| 1.53.362 | 5 / 0 | |
| 1.53.361 | 5 / 0 | |
| 1.53.360 | 5 / 0 | |
| 1.53.359 | 5 / 0 | |
| 1.53.358 | 5 / 0 | |
| 1.53.357 | 5 / 0 | |
| 1.53.356 | 5 / 0 | |
| 1.53.355 | 5 / 0 | |
| 1.53.354 | 5 / 0 | |
| 1.53.353 | 5 / 0 | |
| 1.53.352 | 5 / 0 | |
| 1.53.351 | 5 / 0 | |
| 1.53.350 | 5 / 0 | |
| 1.53.349 | 5 / 0 | |
| 1.53.348 | 5 / 0 | |
| 1.53.347 | 5 / 0 | |
| 1.53.346 | 5 / 0 | |
| 1.53.345 | 5 / 0 | |
| 1.53.344 | 5 / 0 | |
| 1.53.343 | 5 / 0 | |
| 1.53.342 | 5 / 0 | |
| 1.53.341 | 5 / 0 | |
| 1.53.340 | 5 / 0 | |
| 1.53.339 | 5 / 0 |
v1.53.389
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.388
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.387
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.386
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.385
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.384
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.383
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.382
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.381
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.380
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.379
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.378
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.377
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.376
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.375
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.374
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.373
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.372
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.53.371
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.