← Home

@docmd/parser

npm Repository Homepage
18
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

mgks

Keywords

docmdparserutilstoolscontainersmarkdown-itmarkdownmarkdown-processoricon-rendererrenderervalidatorminimalistzero-configsite-generatorstatic-site-generatordocs

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance slsa-provenance AI (provenance): Package consistently published via CI/CD with Sigstore attestation; stable trust signal. ai
typosquat typosquat.levenshtein:parcel AI (typosquat): Scoped @docmd/parser is a Markdown parser, not a typosquat of parcel; name similarity is coincidental. ai

Versions (showing 18 of 18)

Version Deps Published
0.8.16 14 / 0
0.8.15 14 / 0
0.8.14 14 / 0
0.8.13 14 / 0
0.8.12 14 / 0
0.8.11 14 / 0
0.8.10 14 / 0
0.8.9 14 / 0
0.8.8 14 / 0
0.8.7 13 / 0
0.8.6 13 / 0
0.8.5 13 / 0
0.8.4 13 / 0
0.7.9 13 / 0
0.6.4 11 / 0
0.4.3 11 / 0
0.4.2 11 / 0
0.4.0 11 / 0

v0.8.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.