← Home

@forwardimpact/pathway

npm Repository Homepage

Career progression web app and CLI for exploring roles and generating agent teams

12
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

dickolsson

Keywords

careercompetencystandardhrskillstalentai-agentengineering

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:simple-icons AI (phantom-deps): simple-icons is explicitly declared as a runtime dependency in package.json; phantom-dep is a false positive here. ai

Versions (showing 12 of 12)

Version Deps Published
0.26.9 13 / 2
0.26.8 13 / 2
0.26.7 13 / 2
0.26.6 13 / 2
0.26.5 13 / 2
0.26.4 13 / 2
0.25.6 8 / 0
0.5.0 5 / 5
0.4.0 4 / 5
0.3.0 4 / 5
0.2.0 4 / 5
0.1.0 1 / 4

v0.26.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.26.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.26.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.