← Home

@effect/rpc

51
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

schicklingmichael.arnaldieffect-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from michael.arnaldi to GitHub Actions CI/CD is a documented pattern for the @effect org; SLSA attestation confirms integrity. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy followed by CI/CD migration is consistent with @effect org tooling changes, not account takeover. ai
typosquat typosquat.levenshtein:pg AI (typosquat): Scoped @effect/rpc package; Levenshtein match to 'pg' is coincidental, not a typosquat. ai

Versions (showing 51 of 302)

View all versions
Version Deps Published
0.76.0 1 / 0
0.75.1 1 / 0
0.75.0 1 / 0
0.74.0 1 / 0
0.73.2 1 / 0
0.73.1 1 / 0
0.73.0 1 / 0
0.72.2 1 / 0
0.72.1 1 / 0
0.72.0 1 / 0
0.71.2 1 / 0
0.71.1 1 / 0
0.71.0 1 / 0
0.70.2 1 / 0
0.70.1 1 / 0
0.70.0 1 / 0
0.69.5 0 / 0
0.69.4 0 / 0
0.69.3 0 / 0
0.69.2 0 / 0
0.69.1 0 / 0
0.69.0 0 / 0
0.68.4 0 / 0
0.68.3 0 / 0
0.68.2 0 / 0
0.68.1 0 / 0
0.68.0 0 / 0
0.67.0 0 / 0
0.66.0 0 / 0
0.65.2 0 / 0
0.65.1 0 / 0
0.65.0 0 / 0
0.64.14 0 / 0
0.64.13 0 / 0
0.64.12 0 / 0
0.64.11 0 / 0
0.64.10 0 / 0
0.64.9 0 / 0
0.64.8 0 / 0
0.64.7 0 / 0
0.64.6 0 / 0
0.64.5 0 / 0
0.64.4 0 / 0
0.64.3 0 / 0
0.64.2 0 / 0
0.64.1 0 / 0
0.64.0 0 / 0
0.63.0 0 / 0
0.62.4 0 / 0
0.62.3 0 / 0
0.62.2 0 / 0

v0.76.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.