@gjsify/web-streams
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from personal account to GitHub Actions CI is a documented, legitimate migration pattern for this org. | ai | |
| provenance | missing-githead | AI (provenance): Consistent with CI/CD pipeline change; no code changes detected vs prior approved version. | ai | |
| phantom-deps | phantom-dep:@gjsify/utils | AI (phantom-deps): Same-org sibling dep; declared in package.json, phantom-dep is a stable false positive for this package. | ai | |
| provenance | no-provenance | AI (provenance): Consistent across all @gjsify/* packages; no provenance is standard for this publisher. | ai |
Versions (showing 51 of 114)
| Version | Deps | Published |
|---|---|---|
| 0.22.0 | 1 / 4 | |
| 0.21.0 | 1 / 4 | |
| 0.20.0 | 1 / 4 | |
| 0.19.0 | 1 / 4 | |
| 0.18.0 | 1 / 4 | |
| 0.17.0 | 1 / 4 | |
| 0.16.9 | 1 / 4 | |
| 0.16.8 | 1 / 4 | |
| 0.16.7 | 1 / 4 | |
| 0.16.6 | 1 / 4 | |
| 0.16.5 | 1 / 4 | |
| 0.16.4 | 1 / 4 | |
| 0.16.3 | 1 / 4 | |
| 0.16.2 | 1 / 4 | |
| 0.16.1 | 1 / 4 | |
| 0.16.0 | 1 / 4 | |
| 0.15.1 | 1 / 4 | |
| 0.14.0 | 1 / 4 | |
| 0.13.2 | 1 / 4 | |
| 0.13.1 | 1 / 4 | |
| 0.13.0 | 1 / 4 | |
| 0.12.0 | 1 / 4 | |
| 0.11.0 | 1 / 4 | |
| 0.10.0 | 1 / 4 | |
| 0.9.0 | 1 / 4 | |
| 0.8.0 | 1 / 4 | |
| 0.7.5 | 1 / 4 | |
| 0.7.4 | 1 / 4 | |
| 0.7.3 | 1 / 4 | |
| 0.7.2 | 1 / 4 | |
| 0.7.0 | 1 / 4 | |
| 0.6.1 | 1 / 4 | |
| 0.6.0 | 1 / 4 | |
| 0.5.2 | 1 / 4 | |
| 0.5.1 | 1 / 4 | |
| 0.5.0 | 1 / 4 | |
| 0.4.44 | 1 / 4 | |
| 0.4.43 | 1 / 4 | |
| 0.4.42 | 1 / 4 | |
| 0.4.41 | 1 / 4 | |
| 0.4.40 | 1 / 4 | |
| 0.4.39 | 1 / 4 | |
| 0.4.38 | 1 / 4 | |
| 0.4.37 | 1 / 4 | |
| 0.4.36 | 1 / 4 | |
| 0.4.35 | 1 / 4 | |
| 0.4.34 | 1 / 4 | |
| 0.4.33 | 1 / 4 | |
| 0.4.32 | 1 / 4 | |
| 0.4.31 | 1 / 4 | |
| 0.4.30 | 1 / 4 |
v0.22.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.21.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.20.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.19.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.18.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.17.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.9
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.8
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.7
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.6
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.5
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.4
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.3
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.16.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.15.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.13.2
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.13.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.13.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.