@developmentseed/geotiff
High-level GeoTIFF reading library.
5
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
dsiokamicutdsorgolafveermandanielfdsilvaalukach
Keywords
geotiffcogcloud-optimized-geotiffraster
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): Published via CI with SLSA provenance; GitHub Actions publisher pattern explains the maintainer-change signal. | ai | |
| dependencies | unvetted-dep:@cogeotiff/core | AI (dependencies): @cogeotiff/core is a legitimate, established GeoTIFF library; stable false positive for this package. | ai | |
| provenance | slsa-provenance | AI (provenance): SLSA provenance via Sigstore is a strong supply-chain integrity signal; stable for this package. | ai |