← Home

@effect/sql-pg

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

schicklingmichael.arnaldieffect-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing with SLSA provenance; stable for @effect org packages. ai
phantom-deps phantom-dep:pg-pool AI (phantom-deps): pg-pool is a transitive dep of pg; used via pg internals, not direct import. ai
phantom-deps phantom-dep:pg-types AI (phantom-deps): pg-types is a transitive dep of pg; used via pg internals, not direct import. ai
bogus-package bogus-package AI (bogus-package): @effect/sql-pg is a legitimate scoped package; low README score is a false positive. ai

Versions (showing 51 of 298)

View all versions
Version Deps Published
0.53.0 5 / 0
0.52.1 5 / 0
0.52.0 5 / 0
0.51.0 5 / 0
0.50.3 5 / 0
0.50.2 5 / 0
0.50.1 5 / 0
0.50.0 5 / 0
0.49.7 5 / 0
0.49.6 5 / 0
0.49.5 5 / 0
0.49.4 5 / 0
0.49.3 4 / 0
0.49.2 4 / 0
0.49.1 4 / 0
0.49.0 2 / 0
0.48.0 2 / 0
0.47.0 1 / 0
0.46.0 1 / 0
0.45.1 1 / 0
0.45.0 2 / 0
0.44.0 2 / 0
0.43.0 2 / 0
0.42.0 2 / 0
0.41.14 2 / 0
0.41.13 2 / 0
0.41.12 2 / 0
0.41.11 2 / 0
0.41.10 2 / 0
0.41.9 2 / 0
0.41.8 2 / 0
0.41.7 2 / 0
0.41.6 2 / 0
0.41.5 2 / 0
0.41.4 2 / 0
0.41.3 2 / 0
0.41.2 2 / 0
0.41.1 2 / 0
0.41.0 2 / 0
0.40.0 2 / 0
0.39.2 2 / 0
0.39.1 2 / 0
0.39.0 2 / 0
0.38.12 2 / 0
0.38.11 2 / 0
0.38.10 2 / 0
0.38.9 2 / 0
0.38.8 2 / 0
0.38.7 2 / 0
0.38.6 2 / 0
0.38.5 2 / 0

v0.53.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.