@effect/sql-clickhouse
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Effect-TS monorepo transitioned to GitHub Actions CI publishing; SLSA attestation confirms official repo origin. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy reflects CI pipeline migration, not account takeover; SLSA provenance corroborates legitimate publish. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Part of the Effect-TS monorepo; sparse README/keywords are a known pattern for this package family. | ai |
Versions (showing 100 of 195)
| Version | Deps | Published |
|---|---|---|
| 0.50.0 | 1 / 0 | |
| 0.49.0 | 1 / 0 | |
| 0.48.0 | 1 / 0 | |
| 0.47.0 | 1 / 0 | |
| 0.46.0 | 1 / 0 | |
| 0.45.0 | 1 / 0 | |
| 0.44.0 | 1 / 0 | |
| 0.43.0 | 1 / 0 | |
| 0.42.0 | 1 / 0 | |
| 0.41.0 | 1 / 0 | |
| 0.40.0 | 1 / 0 | |
| 0.39.0 | 1 / 0 | |
| 0.38.1 | 1 / 0 | |
| 0.38.0 | 2 / 0 | |
| 0.37.0 | 2 / 0 | |
| 0.36.0 | 2 / 0 | |
| 0.35.0 | 2 / 0 | |
| 0.34.0 | 2 / 0 | |
| 0.33.0 | 2 / 0 | |
| 0.32.0 | 2 / 0 | |
| 0.31.6 | 2 / 0 | |
| 0.31.5 | 2 / 0 | |
| 0.31.3 | 2 / 0 | |
| 0.31.2 | 2 / 0 | |
| 0.31.1 | 2 / 0 | |
| 0.31.0 | 2 / 0 | |
| 0.30.11 | 2 / 0 | |
| 0.30.10 | 2 / 0 | |
| 0.30.9 | 2 / 0 | |
| 0.30.8 | 2 / 0 | |
| 0.30.7 | 2 / 0 | |
| 0.30.6 | 2 / 0 | |
| 0.30.5 | 2 / 0 | |
| 0.30.4 | 2 / 0 | |
| 0.30.3 | 2 / 0 | |
| 0.30.2 | 2 / 0 | |
| 0.30.1 | 2 / 0 | |
| 0.30.0 | 2 / 0 | |
| 0.29.0 | 2 / 0 | |
| 0.28.5 | 2 / 0 | |
| 0.28.4 | 2 / 0 | |
| 0.28.3 | 2 / 0 | |
| 0.28.2 | 2 / 0 | |
| 0.28.1 | 2 / 0 | |
| 0.28.0 | 2 / 0 | |
| 0.27.16 | 2 / 0 | |
| 0.27.15 | 2 / 0 | |
| 0.27.14 | 2 / 0 | |
| 0.27.13 | 2 / 0 | |
| 0.27.12 | 2 / 0 | |
| 0.27.11 | 2 / 0 | |
| 0.27.10 | 2 / 0 | |
| 0.27.9 | 2 / 0 | |
| 0.27.8 | 2 / 0 | |
| 0.27.7 | 2 / 0 | |
| 0.27.6 | 2 / 0 | |
| 0.27.5 | 2 / 0 | |
| 0.27.4 | 2 / 0 | |
| 0.27.3 | 2 / 0 | |
| 0.27.2 | 2 / 0 | |
| 0.27.1 | 2 / 0 | |
| 0.27.0 | 2 / 0 | |
| 0.26.2 | 2 / 0 | |
| 0.26.1 | 2 / 0 | |
| 0.26.0 | 2 / 0 | |
| 0.25.3 | 2 / 0 | |
| 0.25.2 | 2 / 0 | |
| 0.25.1 | 2 / 0 | |
| 0.25.0 | 2 / 0 | |
| 0.24.0 | 2 / 0 | |
| 0.23.5 | 2 / 0 | |
| 0.23.4 | 2 / 0 | |
| 0.23.3 | 2 / 0 | |
| 0.23.2 | 2 / 0 | |
| 0.23.1 | 2 / 0 | |
| 0.23.0 | 2 / 0 | |
| 0.22.3 | 2 / 0 | |
| 0.22.2 | 2 / 0 | |
| 0.22.1 | 2 / 0 | |
| 0.22.0 | 2 / 0 | |
| 0.21.0 | 2 / 0 | |
| 0.20.1 | 2 / 0 | |
| 0.20.0 | 2 / 0 | |
| 0.19.11 | 2 / 0 | |
| 0.19.10 | 2 / 0 | |
| 0.19.9 | 2 / 0 | |
| 0.19.8 | 2 / 0 | |
| 0.19.7 | 2 / 0 | |
| 0.19.6 | 2 / 0 | |
| 0.19.5 | 2 / 0 | |
| 0.19.4 | 2 / 0 | |
| 0.19.3 | 2 / 0 | |
| 0.19.2 | 2 / 0 | |
| 0.19.1 | 2 / 0 | |
| 0.19.0 | 2 / 0 | |
| 0.18.22 | 2 / 0 | |
| 0.18.21 | 2 / 0 | |
| 0.18.20 | 2 / 0 | |
| 0.18.19 | 2 / 0 | |
| 0.18.18 | 2 / 0 |
v0.50.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.19.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.19.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.19.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.18.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.18.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.18.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.18.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.18.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.