← Home

@elevenlabs/elevenlabs-js

npm Repository Homepage

![LOGO](https://github.com/elevenlabs/elevenlabs-python/assets/12028621/21267d89-5e82-4e7e-9c81-caf30b237683)

26
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

gmrchklacop11elevenlabs-paulasjesangelogiacco11labsboris-elevenlabs

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:base64-decode AI (semgrep): Decodes API-provided audio_base_64 field for audio playback; legitimate SDK pattern, not a malicious payload. ai

Versions (showing 26 of 26)

Version Deps Published
2.59.0 3 / 14
2.58.0 3 / 14
2.57.0 3 / 14
2.56.0 3 / 14
2.55.0 3 / 14
2.54.0 3 / 14
2.53.1 3 / 14
2.53.0 3 / 14
2.52.0 3 / 14
2.51.0 3 / 14
2.49.1 3 / 14
2.49.0 3 / 14
2.48.0 3 / 14
2.47.0 3 / 14
2.46.0 3 / 14
2.45.0 3 / 14
2.44.0 3 / 14
2.43.0 3 / 14
2.42.0 3 / 14
2.41.1 3 / 14
2.41.0 3 / 14
2.25.0 3 / 14
2.24.1 3 / 14
2.24.0 3 / 14
2.23.0 3 / 14
2.22.0 3 / 14

v2.59.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.58.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.57.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.56.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.55.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.25.0

2 findings
HIGH Publisher changed: elevenlabs-paulasjes → GitHub Actions (on 2025-11-21) provenance

This version was published by a different npm account than previous versions on 2025-11-21. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.24.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.24.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.23.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.22.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.