← Home

@graphql-mesh/include

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

urigodotansimhaardatanenisdenjotheguild-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance slsa-provenance AI (provenance): graphql-mesh project publishes via GitHub Actions CI with SLSA attestation; stable pattern for this package. ai
provenance publisher-changed AI (provenance): ardatan/graphql-mesh migrated to GitHub Actions publishing; SLSA attestation confirms CI origin. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy explained by CI pipeline migration; SLSA provenance confirms legitimate publish. ai
phantom-deps phantom-dep:dotenv AI (phantom-deps): dotenv is a declared runtime dependency used via config files, not direct import; stable false positive for this package. ai

Versions (showing 51 of 60)

View all versions
Version Deps Published
0.3.41 5 / 0
0.3.40 5 / 0
0.3.39 5 / 0
0.3.38 5 / 0
0.3.37 5 / 0
0.3.36 5 / 0
0.3.35 5 / 0
0.3.34 5 / 0
0.3.33 5 / 0
0.3.32 5 / 0
0.3.31 5 / 0
0.3.30 5 / 0
0.3.29 5 / 0
0.3.28 5 / 0
0.3.27 5 / 0
0.3.26 5 / 0
0.3.25 5 / 0
0.3.24 5 / 0
0.3.23 5 / 0
0.3.22 5 / 0
0.3.21 5 / 0
0.3.20 5 / 0
0.3.19 5 / 0
0.3.18 5 / 0
0.3.17 5 / 0
0.3.16 5 / 0
0.3.15 5 / 0
0.3.14 5 / 0
0.3.13 5 / 0
0.3.12 5 / 0
0.3.11 5 / 0
0.3.10 5 / 0
0.3.9 5 / 0
0.3.8 5 / 0
0.3.7 5 / 0
0.3.6 5 / 0
0.3.5 5 / 0
0.3.4 5 / 0
0.3.3 5 / 0
0.3.2 5 / 0
0.3.1 5 / 0
0.3.0 5 / 0
0.2.20 5 / 0
0.2.19 5 / 0
0.2.18 5 / 0
0.2.17 5 / 0
0.2.16 5 / 0
0.2.15 5 / 0
0.2.14 5 / 0
0.2.13 5 / 0
0.2.12 5 / 0

v0.3.41

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.