← Home

@coinbase/cds-utils

npm Repository Homepage
5
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

coinbase-ownercoinbase-npm

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): SLSA provenance attestation present; gitHead absence is superseded by stronger Sigstore/SLSA supply chain integrity signal. ai
bogus-package bogus-package AI (bogus-package): Coinbase internal design system utility; sparse README and no keywords are expected for an org-internal scoped package. ai

Versions (showing 5 of 5)

Version Deps Published
2.3.5 2 / 4
2.3.4 2 / 4
2.3.3 2 / 4
2.3.2 2 / 4
2.3.1 2 / 4