← Home

@composio/mastra

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

abir-taheersarahsimionescujkomynokj_composioshamsharooncryogenicplanet

Keywords

composioprovidermastra

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): ComposioHQ migrated to GitHub Actions CI publishing with SLSA attestation; this is the expected new publisher for this org's packages. ai
provenance no-provenance AI (provenance): Composio packages consistently lack provenance; stable false positive for this publisher. ai

Versions (showing 51 of 86)

View all versions
Version Deps Published
0.10.2 1 / 7
0.10.1 1 / 6
0.10.0 1 / 6
0.9.3 1 / 6
0.9.2 1 / 6
0.9.1 1 / 6
0.9.0 1 / 6
0.8.1 1 / 6
0.8.0 1 / 6
0.7.0 1 / 6
0.6.11 1 / 6
0.6.10 1 / 6
0.6.9 1 / 6
0.6.8 1 / 6
0.6.7 1 / 6
0.6.6 1 / 6
0.6.5 1 / 6
0.6.4 1 / 6
0.6.3 1 / 6
0.6.2 1 / 6
0.6.1 1 / 6
0.6.0 1 / 6
0.5.5 0 / 5
0.5.4 0 / 5
0.5.3 0 / 5
0.5.2 0 / 5
0.5.1 0 / 5
0.5.0 0 / 5
0.4.0 0 / 5
0.3.4 0 / 5
0.3.3 0 / 5
0.3.2 0 / 5
0.3.1 0 / 5
0.3.0 0 / 5
0.2.6 0 / 5
0.2.5 0 / 5
0.2.4 0 / 5
0.2.3 0 / 5
0.2.2 0 / 5
0.2.1 0 / 5
0.2.0 0 / 5
0.1.56 0 / 5
0.1.55 0 / 5
0.1.54 0 / 5
0.1.53 0 / 4
0.1.52 0 / 4
0.1.51 0 / 4
0.1.50 0 / 4
0.1.49 0 / 4
0.1.48 0 / 4
0.1.47 0 / 4

v0.10.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.