← Home

@ff-labs/fff-node

npm Repository Homepage
24
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

dmtr.kovalenko

Keywords

file-finderfuzzy-searchnodeffillm-toolsagent-toolsfastrust

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI with SLSA provenance attestation; legitimate automation handoff. ai
publish-pattern rapid-publish AI (publish-pattern): Automated CI pipeline; rapid successive publishes are expected for this package. ai

Versions (showing 24 of 24)

Version Deps Published
0.10.1 1 / 2
0.10.0 1 / 2
0.9.6 1 / 2
0.9.5 1 / 2
0.9.4 1 / 2
0.9.3 1 / 2
0.9.2 1 / 2
0.9.1 1 / 2
0.9.0 1 / 2
0.8.4 1 / 2
0.8.1 1 / 2
0.8.0 1 / 2
0.7.2 1 / 2
0.7.1 1 / 2
0.7.0 1 / 2
0.6.4 1 / 2
0.6.3 1 / 2
0.6.2 1 / 2
0.6.0 1 / 2
0.5.2 1 / 2
0.5.1 1 / 2
0.5.0 1 / 2
0.4.2 1 / 2
0.4.0 1 / 2

v0.10.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.