← Home

@fuel-ts/script

npm Repository Homepage
17
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

fuel-ci

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff encoded-string-file:dist/index.global.js AI (source-diff): Encoded string is a base64 WASM binary for fuel-ts math/instruction processing; stable pattern across this package family. ai
bogus-package bogus-package AI (bogus-package): Monorepo sub-package; missing metadata is expected pattern for fuel-ts packages. ai
typosquat typosquat.levenshtein:bcrypt AI (typosquat): Scoped @fuel-ts/* package from FuelLabs monorepo; levenshtein match to bcrypt is a false positive. ai
typosquat typosquat.levenshtein:stripe AI (typosquat): Scoped @fuel-ts/* package from FuelLabs monorepo; levenshtein match to stripe is a false positive. ai
phantom-deps phantom-dep:@fuel-ts/transactions AI (phantom-deps): Same-org sibling dep; may be used transitively or in type declarations without direct import. ai

Versions (showing 17 of 17)

Version Deps Published
0.103.0 7 / 1
0.102.0 7 / 1
0.101.3 7 / 1
0.101.2 7 / 1
0.101.1 7 / 1
0.101.0 7 / 1
0.100.6 7 / 1
0.100.5 7 / 1
0.100.4 7 / 1
0.100.3 7 / 1
0.100.2 7 / 1
0.100.1 7 / 1
0.100.0 7 / 1
0.99.0 7 / 1
0.98.0 7 / 1
0.97.2 9 / 1
0.97.1 9 / 1

v0.100.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.100.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.100.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.100.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.100.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.100.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.100.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.99.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.98.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.97.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.97.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.