← Home

@defra/forms-model

51
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

stuaa78npm-envagerichard-mohammed-defdefradigitaladmindefradigitalcijaucourtbensagar-eaz424bravenpmtjmason.defrapwadmore.defrachotainiki.wycherleypsandrewsalexluckettmaxcbc-defrapmshaw15markfeegeordiefoodannyleechjohnwatson484christopherjturnernrichardson_defra

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI/CD publishing is confirmed by SLSA provenance attestation; expected for this package going forward. ai

Versions (showing 51 of 619)

View all versions
Version Deps Published
3.0.689 5 / 4
3.0.688 5 / 4
3.0.687 5 / 4
3.0.686 5 / 4
3.0.685 5 / 4
3.0.684 5 / 4
3.0.683 5 / 4
3.0.682 5 / 4
3.0.681 5 / 4
3.0.680 5 / 4
3.0.679 5 / 4
3.0.678 5 / 4
3.0.677 5 / 4
3.0.676 5 / 4
3.0.675 5 / 4
3.0.674 5 / 4
3.0.673 5 / 4
3.0.672 5 / 4
3.0.671 5 / 4
3.0.670 5 / 4
3.0.669 5 / 4
3.0.668 5 / 4
3.0.667 5 / 4
3.0.666 5 / 4
3.0.665 5 / 4
3.0.664 5 / 4
3.0.663 5 / 4
3.0.656 5 / 4
3.0.655 5 / 4
3.0.654 5 / 4
3.0.653 5 / 4
3.0.652 5 / 4
3.0.651 5 / 4
3.0.650 5 / 4
3.0.649 5 / 4
3.0.648 5 / 4
3.0.647 5 / 4
3.0.646 5 / 4
3.0.645 5 / 4
3.0.644 5 / 4
3.0.643 5 / 4
3.0.642 5 / 4
3.0.641 5 / 4
3.0.640 5 / 4
3.0.639 5 / 4
3.0.638 5 / 4
3.0.637 5 / 4
3.0.636 5 / 4
3.0.635 5 / 4
3.0.634 5 / 4
3.0.633 5 / 4

v3.0.689

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.0.688

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.0.687

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.