← Home

@dxos/web-context-solid

npm Repository Homepage

Solid.js integration with web context protocol

3
Versions
MIT
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures No source commit

Maintainers

richburdonmarik_dwittjosiahdxos-botmykola-vrmchk

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing with SLSA attestation; consistent with org-wide CI/CD migration for dxos monorepo. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer removal aligns with shift to GitHub Actions publishing; no malicious indicators present. ai
npm-metadata suspicious-initial-version AI (npm-metadata): DXOS monorepo uses 0.0.0 as standard initial version across all packages; not a malware indicator here. ai

Versions (showing 3 of 3)

Version Deps Published
0.10.0 2 / 3
0.9.0 2 / 3
0.0.0 2 / 3

v0.10.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.