@graphql-mesh/cross-helpers No license 40 versions

@graphql-mesh/cross-helpers

npm Repository Homepage

40

Versions

—

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

urigodotansimhaardatanenisdenjotheguild-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): Publisher changed to GitHub Actions CI with SLSA attestation; consistent with The Guild's CI/CD migration for graphql-mesh.	ai	2026/05/01
publish-pattern	dormant-publish	AI (publish-pattern): Dormancy reflects the package's stable state; resumed publishing under CI with provenance attestation.	ai	2026/05/01
semgrep	semgrep:new-function-constructor	AI (semgrep): Used only to probe import.meta.env availability in a try/catch; not user-controlled input.	ai	2026/04/29
dependencies	unvetted-dep:react-native-fs	AI (dependencies): Intentional React Native target dependency for cross-platform file system support.	ai	2026/04/29
dependencies	unvetted-dep:react-native-path	AI (dependencies): Intentional React Native target dependency for cross-platform path support.	ai	2026/04/29

Versions (showing 40 of 40)

Version	Deps	Published
0.4.15	2 / 1	2026/07/20
0.4.14	2 / 1	2026-04-23
0.4.13	2 / 1	2026-04-14
0.4.12	2 / 1	2026-01-16
0.4.11	2 / 1	2025-12-04
0.4.10	2 / 0	2025-02-10
0.4.9	2 / 0	2024-12-06
0.4.8	1 / 0	2024-11-22
0.4.7	1 / 0	2024-10-16
0.4.6	1 / 0	2024-08-14
0.4.5	1 / 0	2024-08-08
0.4.4	1 / 0	2024-07-01
0.4.3	1 / 0	2024-05-27
0.4.2	1 / 0	2024-04-29
0.4.1	1 / 0	2023-09-27
0.4.0	3 / 0	2023-06-05
0.3.4	3 / 0	2023-03-23
0.3.3	4 / 0	2023-02-13
0.3.2	4 / 0	2023-02-13
0.3.1	4 / 0	2023-01-17
0.3.0	4 / 0	2022-12-07
0.2.10	4 / 0	2022-11-17
0.2.9	4 / 0	2022-11-07
0.2.8	4 / 0	2022-10-31
0.2.7	4 / 0	2022-10-28
0.2.6	4 / 0	2022-09-12
0.2.5	4 / 0	2022-09-09
0.2.4	4 / 0	2022-09-05
0.2.3	4 / 0	2022-09-01
0.2.2	4 / 0	2022-08-15
0.2.1	4 / 0	2022-08-10
0.2.0	4 / 0	2022-06-30
0.1.7	4 / 0	2022-06-29
0.1.6	4 / 0	2022-06-03
0.1.5	3 / 0	2022-05-26
0.1.4	3 / 0	2022-05-16
0.1.3	3 / 0	2022-05-11
0.1.2	3 / 0	2022-04-25
0.1.1	3 / 0	2022-04-21
0.1.0	4 / 0	2022-03-21

v0.4.15

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.10

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.9

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.8

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.7

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.6

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.5

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.4.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.4.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.4.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.3.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.3.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.3.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.3.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.1.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.