@emilgroup/payment-sdk
OpenAPI client for @emilgroup/payment-sdk
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Versions (showing 9 of 9)
| Version | Deps | Published |
|---|---|---|
| 1.22.0 | 1 / 1 | |
| 1.21.0 | 1 / 1 | |
| 1.19.0 | 1 / 1 | |
| 1.13.0 | 1 / 1 | |
| 1.9.0 | 1 / 1 | |
| 1.8.0 | 1 / 1 | |
| 1.7.0 | 1 / 1 | |
| 1.3.1 | 1 / 1 | |
| 1.0.0 | 1 / 1 |
v1.22.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.21.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.19.0
3 findingsAll previous maintainers (cover42devs) were replaced by new maintainers (ahmed.zeno, adobrodey-emil, pavlomaksymov, alexandrecastro, alexeyoleynik, edgar-emil, emil_engineering, jonathan.chen, wojciech_at_emil, maksym-emil, yevheniia-emil, emil_aleksandra, vitaly_emil, andrii_meleniuk, iaroslav.ovcharenko, hussein.istanbouli, thomascover42, emil-hussein, thmd, rkachalka, zamiul, emil-rick, mads-emil, olga_timchenko). This is a strong signal of a potential package hijack and requires careful review.
This version was published by a different npm account than previous versions on 2026-07-20. This could indicate a legitimate maintainer transition or an account compromise.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.13.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.9.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.8.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.7.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.