← Home

@confect/js

npm Repository Homepage

JavaScript client bindings for any JS runtime

20
Versions
ISC
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

rj-dellecese

Keywords

convexeffect

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:qs AI (typosquat): Scoped package @confect/js with legitimate repo/provenance; Levenshtein match on 'qs' is coincidental. ai
typosquat typosquat.levenshtein:jest AI (typosquat): Same rationale; no impersonation of jest. ai
typosquat typosquat.levenshtein:pg AI (typosquat): Same rationale; no impersonation of pg. ai
typosquat typosquat.levenshtein:rxjs AI (typosquat): Same rationale; no impersonation of rxjs. ai
typosquat typosquat.levenshtein:joi AI (typosquat): Same rationale; no impersonation of joi. ai
typosquat typosquat.levenshtein:ajv AI (typosquat): Same rationale; no impersonation of ajv. ai

Versions (showing 20 of 20)

Version Deps Published
9.2.5 0 / 7
9.2.4 0 / 7
9.2.3 0 / 6
9.2.2 0 / 6
9.2.1 0 / 6
9.2.0 0 / 6
9.1.5 0 / 6
9.1.4 0 / 6
9.1.3 0 / 6
9.1.2 0 / 6
9.1.1 0 / 6
9.1.0 0 / 6
9.0.2 0 / 6
9.0.1 0 / 6
9.0.0 0 / 6
8.0.0 0 / 10
7.0.0 0 / 10
6.0.0 0 / 10
5.0.0 0 / 10
4.0.0 0 / 10

v9.2.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.2.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.2.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.2.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.2.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.1.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.