← Home

@hiero-ledger/proto

10
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

lfdt-npmrbarkernathan-swirldslabsandrewb1269hg

Keywords

hierohederahashgraphsdktransactions

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed from human account to GitHub Actions CI/CD with SLSA provenance attestation — this is a supply chain security improvement, not a compromise indicator. ai
phantom-deps phantom-dep:rimraf AI (phantom-deps): rimraf is a well-established utility; its presence as a phantom dep indicates a packaging quality issue (should be devDep), not a security risk. ai

Versions (showing 10 of 10)

Version Deps Published
2.31.0 1 / 31
2.30.0 2 / 29
2.29.0 2 / 29
2.28.0 2 / 29
2.27.0 2 / 29
2.25.0 1 / 29
2.24.0 1 / 29
2.23.0 1 / 29
2.22.0 2 / 29
2.21.0 2 / 29