@graphql-codegen/typescript-operations
GraphQL Code Generator plugin for generating TypeScript types for GraphQL queries, mutations, subscriptions and fragments
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from theguild-bot to GitHub Actions CI; SLSA provenance confirms legitimate publish pipeline. | ai | |
| provenance | missing-githead | AI (provenance): gitHead absence is expected when publishing via GitHub Actions with npm provenance. | ai |
Versions (showing 51 of 156)
| Version | Deps | Published |
|---|---|---|
| 6.1.2 | 5 / 0 | |
| 6.1.1 | 5 / 0 | |
| 6.1.0 | 5 / 0 | |
| 6.0.5 | 5 / 0 | |
| 6.0.4 | 5 / 0 | |
| 6.0.3 | 5 / 0 | |
| 6.0.2 | 5 / 0 | |
| 6.0.1 | 5 / 0 | |
| 6.0.0 | 5 / 0 | |
| 5.1.0 | 5 / 0 | |
| 5.0.9 | 5 / 0 | |
| 5.0.8 | 5 / 0 | |
| 5.0.7 | 5 / 0 | |
| 5.0.6 | 5 / 0 | |
| 5.0.5 | 5 / 0 | |
| 5.0.4 | 5 / 0 | |
| 5.0.3 | 5 / 0 | |
| 5.0.2 | 5 / 0 | |
| 5.0.1 | 5 / 0 | |
| 5.0.0 | 5 / 0 | |
| 4.6.1 | 5 / 0 | |
| 4.6.0 | 5 / 0 | |
| 4.5.1 | 5 / 0 | |
| 4.5.0 | 5 / 0 | |
| 4.4.1 | 5 / 0 | |
| 4.4.0 | 5 / 0 | |
| 4.3.1 | 5 / 0 | |
| 4.3.0 | 5 / 0 | |
| 4.2.3 | 5 / 0 | |
| 4.2.2 | 5 / 0 | |
| 4.2.1 | 5 / 0 | |
| 4.2.0 | 5 / 0 | |
| 4.1.3 | 5 / 0 | |
| 4.1.2 | 5 / 0 | |
| 4.1.1 | 5 / 0 | |
| 4.1.0 | 5 / 0 | |
| 4.0.1 | 5 / 0 | |
| 4.0.0 | 5 / 0 | |
| 3.0.4 | 5 / 0 | |
| 3.0.3 | 5 / 0 | |
| 3.0.2 | 5 / 0 | |
| 3.0.1 | 5 / 0 | |
| 3.0.0 | 5 / 0 | |
| 2.5.13 | 5 / 0 | |
| 2.5.12 | 5 / 0 | |
| 2.5.11 | 5 / 0 | |
| 2.5.10 | 5 / 0 | |
| 2.5.9 | 5 / 0 | |
| 2.5.8 | 5 / 0 | |
| 2.5.7 | 5 / 0 | |
| 2.5.6 | 5 / 0 |
v6.1.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.1.1
2 findingsPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
[Accepted risk] This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
v6.1.0
2 findingsPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
[Accepted risk] This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.