@chainlink/cre-sdk-javy-plugin
Chainlink CRE SDK Javy Plugin.
10
Versions
BUSL-1.1
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
npmserviceaccount-cllm4ussecure.andrewsecure.javiernotoriousenigmasecure.ericzsecure.thanhsecure_handerson
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publisher is confirmed by SLSA provenance attestation; legitimate CI/CD migration for this Chainlink package. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Build script utility passing env to child processes; expected pattern for a build tool, not a secret leak risk. | ai |