@gpc-cli/cli
GPC — Google Play Console CLI. 217 API endpoints including Managed Google Play. Upload AABs, manage releases, monitor vitals, publish private enterprise apps. Fastlane alternative for Android.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): SLSA attestation present; missing gitHead is a minor CI config artifact, not a supply chain risk for this package. | ai | |
| provenance | no-provenance | AI (provenance): Package has never had provenance attestation; stable pattern across versions. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from human publisher to GitHub Actions CI/CD is confirmed by SLSA provenance attestation; expected for this package. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @gpc-cli/cli is a Google Play Console CLI tool; Levenshtein match to 'joi' is a false positive. | ai | |
| phantom-deps | phantom-dep:@gpc-cli/plugin-sdk | AI (phantom-deps): Same org scope; likely re-exported or used indirectly. Stable false positive for this package. | ai |
Versions (showing 51 of 85)
| Version | Deps | Published |
|---|---|---|
| 0.9.91 | 6 / 1 | |
| 0.9.90 | 6 / 1 | |
| 0.9.89 | 6 / 1 | |
| 0.9.88 | 6 / 1 | |
| 0.9.87 | 6 / 1 | |
| 0.9.86 | 6 / 1 | |
| 0.9.85 | 6 / 1 | |
| 0.9.84 | 6 / 1 | |
| 0.9.83 | 6 / 1 | |
| 0.9.82 | 6 / 1 | |
| 0.9.81 | 6 / 1 | |
| 0.9.80 | 6 / 1 | |
| 0.9.79 | 6 / 1 | |
| 0.9.78 | 6 / 1 | |
| 0.9.77 | 6 / 1 | |
| 0.9.73 | 6 / 1 | |
| 0.9.72 | 6 / 1 | |
| 0.9.71 | 6 / 1 | |
| 0.9.70 | 6 / 1 | |
| 0.9.69 | 6 / 1 | |
| 0.9.68 | 6 / 1 | |
| 0.9.67 | 6 / 1 | |
| 0.9.66 | 6 / 1 | |
| 0.9.65 | 6 / 1 | |
| 0.9.64 | 6 / 1 | |
| 0.9.63 | 6 / 1 | |
| 0.9.62 | 6 / 1 | |
| 0.9.61 | 6 / 1 | |
| 0.9.60 | 6 / 1 | |
| 0.9.59 | 6 / 1 | |
| 0.9.58 | 6 / 1 | |
| 0.9.57 | 6 / 1 | |
| 0.9.56 | 6 / 1 | |
| 0.9.55 | 6 / 1 | |
| 0.9.54 | 6 / 1 | |
| 0.9.51 | 6 / 1 | |
| 0.9.50 | 6 / 1 | |
| 0.9.49 | 6 / 1 | |
| 0.9.48 | 6 / 1 | |
| 0.9.47 | 6 / 1 | |
| 0.9.46 | 6 / 1 | |
| 0.9.45 | 6 / 1 | |
| 0.9.44 | 6 / 1 | |
| 0.9.43 | 6 / 1 | |
| 0.9.42 | 6 / 1 | |
| 0.9.41 | 6 / 1 | |
| 0.9.40 | 6 / 1 | |
| 0.9.39 | 6 / 1 | |
| 0.9.38 | 6 / 1 | |
| 0.9.37 | 6 / 1 | |
| 0.9.36 | 6 / 1 |
v0.9.91
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.9.90
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.9.89
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.9.88
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.9.87
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.