← Home

@graphql-mesh/transport-common

npm Repository
20
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

urigodotansimhaardatanenisdenjotheguild-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:tslib AI (phantom-deps): tslib is a declared runtime dependency used by bundled output; phantom-dep false positive for this package. ai

Versions (showing 20 of 20)

Version Deps Published
1.0.19 9 / 4
1.0.18 9 / 4
1.0.17 9 / 4
1.0.16 9 / 4
1.0.15 9 / 4
1.0.14 9 / 4
1.0.13 9 / 4
1.0.12 9 / 4
1.0.11 9 / 4
1.0.10 9 / 4
1.0.9 9 / 4
1.0.8 9 / 4
1.0.7 9 / 4
1.0.6 9 / 4
1.0.5 9 / 4
1.0.4 9 / 4
1.0.3 9 / 4
1.0.2 9 / 4
1.0.1 9 / 4
1.0.0 9 / 4

v1.0.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.