← Home

@durable-streams/client

npm Repository Homepage
13
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

dev-npm-publisher-2kylemathews

Keywords

durable-streamsstreamingclienttypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): SLSA provenance attestation present; gitHead absence is superseded by Sigstore attestation for this package. ai
semgrep semgrep:base64-decode AI (semgrep): Base64 decoding is used for binary stream data deserialization, not payload obfuscation; stable pattern for this package. ai
phantom-deps phantom-dep:@microsoft/fetch-event-source AI (phantom-deps): @microsoft/fetch-event-source is a declared runtime dependency; likely imported in compiled output rather than raw source. ai

Versions (showing 13 of 13)

Version Deps Published
0.2.6 2 / 4
0.2.5 2 / 4
0.2.4 2 / 4
0.2.3 2 / 4
0.2.2 2 / 4
0.2.1 2 / 3
0.2.0 2 / 3
0.1.5 2 / 3
0.1.4 2 / 3
0.1.3 2 / 3
0.1.2 2 / 3
0.1.1 2 / 3
0.1.0 2 / 3