← Home

@granite-js/cli

npm Repository

The Granite CLI

42
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

jingjing2222heecheolghleegronxbgranite-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:joi AI (typosquat): Scoped @granite-js/cli package from toss/granite org; levenshtein match to 'joi' is a false positive. ai
phantom-deps phantom-dep:ora AI (phantom-deps): CLI tool; ora is a declared runtime dep likely used conditionally or via dynamic import. ai
phantom-deps phantom-dep:zod AI (phantom-deps): Declared runtime dep in a CLI tool; phantom-dep heuristic fires on config-file references. ai
phantom-deps phantom-dep:connect AI (phantom-deps): Declared runtime dep; phantom-dep heuristic fires on config-file references. ai
phantom-deps phantom-dep:enquirer AI (phantom-deps): Declared runtime dep; phantom-dep heuristic fires on config-file references. ai
phantom-deps phantom-dep:typanion AI (phantom-deps): Declared runtime dep; phantom-dep heuristic fires on config-file references. ai
phantom-deps phantom-dep:@granite-js/utils AI (phantom-deps): Same org scope; phantom-dep heuristic is unreliable for monorepo packages. ai
phantom-deps phantom-dep:@inquirer/prompts AI (phantom-deps): Declared runtime dep; phantom-dep heuristic fires on config-file references. ai
phantom-deps phantom-dep:@shopify/semaphore AI (phantom-deps): Declared runtime dep; phantom-dep heuristic fires on config-file references. ai

Versions (showing 42 of 42)

Version Deps Published
1.0.37 15 / 16
1.0.36 15 / 16
1.0.35 15 / 16
1.0.34 15 / 16
1.0.33 15 / 16
1.0.32 15 / 16
1.0.31 15 / 16
1.0.30 15 / 16
1.0.29 15 / 16
1.0.28 15 / 16
1.0.27 15 / 16
1.0.26 15 / 16
1.0.25 15 / 16
1.0.24 15 / 16
1.0.23 15 / 16
1.0.22 15 / 16
1.0.21 15 / 16
1.0.20 15 / 16
1.0.19 15 / 16
1.0.18 15 / 16
1.0.17 15 / 16
1.0.16 15 / 16
1.0.15 15 / 16
1.0.14 15 / 16
1.0.13 15 / 16
1.0.12 15 / 16
1.0.11 15 / 16
1.0.10 15 / 16
1.0.9 15 / 16
1.0.8 15 / 16
1.0.7 15 / 16
1.0.6 15 / 16
1.0.5 15 / 16
1.0.4 15 / 16
1.0.3 15 / 16
1.0.2 15 / 16
1.0.1 15 / 16
1.0.0 15 / 16
0.1.34 15 / 16
0.1.33 15 / 16
0.1.32 15 / 16
0.1.31 15 / 15

v1.0.37

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.36

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.35

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.34

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.