← Home

@composio/mastra

npm Repository Homepage
86
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

abir-taheersarahsimionescujkomynokj_composioshamsharooncryogenicplanet

Keywords

composioprovidermastra

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): ComposioHQ migrated to GitHub Actions CI publishing with SLSA attestation; this is the expected new publisher for this org's packages. ai
provenance no-provenance AI (provenance): Composio packages consistently lack provenance; stable false positive for this publisher. ai

Versions (showing 86 of 86)

Version Deps Published
0.10.2 1 / 7
0.10.1 1 / 6
0.10.0 1 / 6
0.9.3 1 / 6
0.9.2 1 / 6
0.9.1 1 / 6
0.9.0 1 / 6
0.8.1 1 / 6
0.8.0 1 / 6
0.7.0 1 / 6
0.6.11 1 / 6
0.6.10 1 / 6
0.6.9 1 / 6
0.6.8 1 / 6
0.6.7 1 / 6
0.6.6 1 / 6
0.6.5 1 / 6
0.6.4 1 / 6
0.6.3 1 / 6
0.6.2 1 / 6
0.6.1 1 / 6
0.6.0 1 / 6
0.5.5 0 / 5
0.5.4 0 / 5
0.5.3 0 / 5
0.5.2 0 / 5
0.5.1 0 / 5
0.5.0 0 / 5
0.4.0 0 / 5
0.3.4 0 / 5
0.3.3 0 / 5
0.3.2 0 / 5
0.3.1 0 / 5
0.3.0 0 / 5
0.2.6 0 / 5
0.2.5 0 / 5
0.2.4 0 / 5
0.2.3 0 / 5
0.2.2 0 / 5
0.2.1 0 / 5
0.2.0 0 / 5
0.1.56 0 / 5
0.1.55 0 / 5
0.1.54 0 / 5
0.1.53 0 / 4
0.1.52 0 / 4
0.1.51 0 / 4
0.1.50 0 / 4
0.1.49 0 / 4
0.1.48 0 / 4
0.1.47 0 / 4
0.1.46 0 / 4
0.1.45 0 / 4
0.1.44 0 / 4
0.1.43 0 / 4
0.1.42 0 / 4
0.1.41 0 / 4
0.1.40 0 / 4
0.1.39 0 / 4
0.1.38 0 / 4
0.1.37 0 / 4
0.1.36 0 / 4
0.1.35 0 / 4
0.1.34 0 / 4
0.1.33 0 / 4
0.1.32 0 / 4
0.1.31 0 / 4
0.1.30 0 / 4
0.1.29 0 / 4
0.1.28 0 / 4
0.1.27 0 / 4
0.1.26 0 / 4
0.1.25 0 / 4
0.1.24 0 / 4
0.1.23 0 / 4
0.1.22 0 / 4
0.1.21 0 / 4
0.1.20 0 / 4
0.1.19 0 / 4
0.1.18 0 / 4
0.1.17 0 / 4
0.1.16 0 / 4
0.1.15 0 / 4
0.1.14 0 / 4
0.1.13 0 / 4
0.1.12 0 / 4

v0.10.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.