@google-cloud/compute — Greenflagged

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

google-wombot

Keywords

google apis clientgoogle api clientgoogle apisgoogle apigooglegoogle cloud platformgoogle cloudcloudgoogle computecomputeaccelerator typesaddressesautoscalersbackend bucketsbackend servicesdisksdisk typesexternal vpn gatewaysfirewall policiesfirewallsforwarding rulesglobal addressesglobal forwarding rulesglobal network endpoint groupsglobal operationsglobal organization operationsglobal public delegated prefixeshealth checksimagesinstance group managersinstance groupsinstancesinstance templatesinterconnect attachmentsinterconnect locationsinterconnectslicense codeslicensesmachine typesnetwork endpoint groupsnetworksnode groupsnode templatesnode typespacket mirroringsprojectspublic advertised prefixespublic delegated prefixesregion autoscalersregion backend servicesregion commitmentsregion disksregion disk typesregion health checksregion health check servicesregion instance group managersregion instance groupsregion instancesregion network endpoint groupsregion notification endpointsregion operationsregionsregion ssl certificatesregion target http proxiesregion target https proxiesregion url mapsreservationsresource policiesroutersroutessecurity policiessnapshotsssl certificatesssl policiessubnetworkstarget grpc proxiestarget http proxiestarget https proxiestarget instancestarget poolstarget ssl proxiestarget tcp proxiestarget vpn gatewaysurl mapsvpn gatewaysvpn tunnelszone operationszones

Versions (showing 4 of 4)

Version	Deps	Published
6.13.0	1 / 16	2026-06-01
6.12.0	1 / 17	2026-05-27
6.11.0	1 / 17	2026-05-14
6.9.1	1 / 17	2026-05-01

v6.13.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v6.12.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v6.11.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v6.9.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.