← Home

@deephaven/jsapi-types

npm Repository Homepage
11
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

vbabichmofojedmikebenderniloc132jnumainvilledeephaven-botbinglesmattrunyon

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI/CD is confirmed by SLSA provenance attestation; expected for this org. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy followed by CI/CD migration is consistent with the Deephaven org's publishing workflow change, not a takeover. ai

Versions (showing 11 of 11)

Version Deps Published
42.2.0 0 / 2
42.1.0 0 / 2
42.0.0 0 / 2
41.7.0 0 / 2
41.6.0 0 / 2
41.5.0 0 / 2
41.4.0 0 / 2
41.3.0 0 / 2
41.2.0 0 / 2
41.1.0 0 / 2
41.0.0 0 / 2

v42.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v42.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.