← Home

@codespar/types

npm Repository Homepage
13
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

codespar-npmdangazineu

Keywords

codesparsessioncontractsdk

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Package migrated to GitHub Actions CI publishing with SLSA attestation; this is the intended workflow for the codespar org. ai
maintainer-change maintainer-added AI (maintainer-change): dangazineu added as maintainer alongside CI publishing transition; consistent with legitimate org setup. ai

Versions (showing 13 of 13)

Version Deps Published
0.10.15 0 / 3
0.10.14 0 / 3
0.10.13 0 / 3
0.10.12 0 / 3
0.10.11 0 / 3
0.10.10 0 / 3
0.10.9 0 / 3
0.10.7 0 / 3
0.10.5 0 / 3
0.10.1 0 / 3
0.10.0 0 / 3
0.7.0 0 / 3
0.1.0 0 / 3

v0.10.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.