@effect/platform-node
51
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
schicklingmichael.arnaldieffect-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Legit 0.0.0 initial release pattern common in Effect ecosystem monorepo packages. | ai | |
| dependencies | unvetted-dep:@effect/io | AI (dependencies): Sibling package within the same trusted Effect monorepo/org. | ai | |
| provenance | publisher-changed | AI (provenance): @effect ecosystem migrated publishing to GitHub Actions CI/CD with SLSA attestation; michael.arnaldi → GitHub Actions is a documented org-level transition, not a takeover. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy is explained by the org-wide migration to automated GitHub Actions publishing; SLSA provenance attestation confirms legitimate CI/CD origin. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Part of the Effect ecosystem monorepo; sparse npm metadata (no keywords, minimal README) is consistent across all @effect/* packages and does not indicate spam. | ai | |
| dependencies | unvetted-dep:@effect/platform-node-shared | AI (dependencies): Sibling package within the same @effect org; expected internal dependency for this ecosystem package. | ai |
Versions (showing 51 of 538)
| Version | Deps | Published |
|---|---|---|
| 0.108.0 | 4 / 0 | |
| 0.107.0 | 4 / 0 | |
| 0.106.0 | 4 / 0 | |
| 0.105.0 | 4 / 0 | |
| 0.104.1 | 4 / 0 | |
| 0.104.0 | 4 / 0 | |
| 0.103.0 | 4 / 0 | |
| 0.102.0 | 4 / 0 | |
| 0.101.2 | 4 / 0 | |
| 0.101.1 | 4 / 0 | |
| 0.101.0 | 4 / 0 | |
| 0.100.0 | 4 / 0 | |
| 0.99.0 | 4 / 0 | |
| 0.98.4 | 4 / 0 | |
| 0.98.3 | 4 / 0 | |
| 0.98.2 | 4 / 0 | |
| 0.98.1 | 4 / 0 | |
| 0.98.0 | 4 / 0 | |
| 0.97.1 | 4 / 0 | |
| 0.97.0 | 4 / 0 | |
| 0.96.1 | 4 / 0 | |
| 0.96.0 | 4 / 0 | |
| 0.95.0 | 4 / 0 | |
| 0.94.2 | 4 / 0 | |
| 0.94.1 | 4 / 0 | |
| 0.94.0 | 4 / 0 | |
| 0.93.0 | 4 / 0 | |
| 0.92.0 | 4 / 0 | |
| 0.91.0 | 4 / 0 | |
| 0.90.0 | 4 / 0 | |
| 0.89.6 | 4 / 0 | |
| 0.89.5 | 4 / 0 | |
| 0.89.3 | 4 / 0 | |
| 0.89.2 | 4 / 0 | |
| 0.89.1 | 4 / 0 | |
| 0.89.0 | 4 / 0 | |
| 0.88.11 | 4 / 0 | |
| 0.88.10 | 4 / 0 | |
| 0.88.9 | 4 / 0 | |
| 0.88.8 | 4 / 0 | |
| 0.88.7 | 4 / 0 | |
| 0.88.6 | 4 / 0 | |
| 0.88.5 | 4 / 0 | |
| 0.88.4 | 4 / 0 | |
| 0.88.3 | 4 / 0 | |
| 0.88.2 | 4 / 0 | |
| 0.88.1 | 4 / 0 | |
| 0.88.0 | 4 / 0 | |
| 0.87.0 | 4 / 0 | |
| 0.86.5 | 4 / 0 | |
| 0.86.4 | 4 / 0 |
v0.108.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.