@dcl/core-commons
Shared utilities and types for core components
13
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
decentralandbotimazzara
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from decentralandbot to GitHub Actions CI is expected for Decentraland org; SLSA attestation confirms integrity. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainer aligns with org CI transition; SLSA provenance corroborates legitimate publish. | ai |