← Home

@instantdb/platform

npm Repository Homepage

Instant's platform package for managing Instant apps.

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

stopachkanezajdwwdrew-h

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:base64-decode AI (semgrep): Standard JWT/token decoding in clerk.ts; not obfuscation or payload hiding. ai
provenance slsa-provenance AI (provenance): Package consistently publishes via GitHub Actions with SLSA provenance attestation; this is the expected publishing pattern for @instantdb/platform. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy followed by CI/CD-published release with SLSA provenance is not indicative of takeover for this established InstantDB sub-package. ai
provenance publisher-changed AI (provenance): Publisher changed to GitHub Actions with SLSA provenance attestation from the official instantdb/instant repo. This is a legitimate CI/CD migration, stable for this package going forward. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer removal is consistent with migration to GitHub Actions CI/CD publishing. SLSA attestation confirms artifact integrity from the official repo. ai
dependencies unvetted-dep:@instantdb/core AI (dependencies): @instantdb/core is a sibling package from the same InstantDB monorepo, published at matching versions. The unvetted status is a review-ordering artifact, not a security concern. ai

Versions (showing 100 of 202)

Version Deps Published
1.0.52 5 / 13
1.0.51 5 / 13
1.0.50 5 / 13
1.0.49 5 / 13
1.0.48 5 / 13
1.0.47 5 / 13
1.0.46 5 / 13
1.0.45 5 / 13
1.0.44 5 / 13
1.0.43 5 / 13
1.0.42 5 / 13
1.0.41 5 / 13
1.0.40 5 / 13
1.0.39 5 / 13
1.0.38 5 / 13
1.0.37 5 / 13
1.0.36 5 / 13
1.0.35 5 / 13
1.0.34 5 / 13
1.0.33 5 / 13
1.0.32 5 / 13
1.0.31 5 / 13
1.0.30 4 / 13
1.0.29 4 / 13
1.0.28 4 / 13
1.0.27 4 / 13
1.0.26 4 / 13
1.0.25 4 / 13
1.0.24 4 / 13
1.0.23 4 / 13
1.0.22 4 / 13
1.0.21 4 / 13
1.0.20 4 / 13
1.0.19 4 / 13
1.0.18 4 / 13
1.0.17 4 / 13
1.0.16 4 / 13
1.0.15 4 / 13
1.0.14 4 / 13
1.0.13 4 / 13
1.0.12 4 / 13
1.0.11 4 / 13
1.0.10 4 / 13
1.0.9 4 / 13
1.0.8 4 / 13
1.0.7 4 / 13
1.0.6 4 / 13
1.0.5 4 / 13
1.0.4 4 / 13
1.0.3 4 / 13
1.0.2 4 / 13
1.0.1 4 / 13
1.0.0 4 / 13
0.22.185 4 / 13
0.22.184 4 / 13
0.22.183 4 / 13
0.22.182 4 / 13
0.22.181 4 / 13
0.22.180 4 / 13
0.22.179 4 / 13
0.22.178 4 / 13
0.22.177 4 / 13
0.22.175 4 / 13
0.22.174 4 / 13
0.22.173 4 / 13
0.22.172 4 / 13
0.22.171 4 / 13
0.22.169 4 / 13
0.22.168 4 / 13
0.22.167 4 / 13
0.22.166 4 / 13
0.22.165 4 / 13
0.22.164 4 / 13
0.22.163 4 / 13
0.22.162 4 / 13
0.22.161 4 / 13
0.22.160 4 / 13
0.22.159 4 / 13
0.22.158 4 / 13
0.22.157 4 / 13
0.22.156 4 / 13
0.22.155 4 / 13
0.22.154 4 / 13
0.22.153 4 / 13
0.22.152 4 / 13
0.22.151 4 / 13
0.22.150 4 / 13
0.22.149 4 / 13
0.22.148 4 / 13
0.22.147 4 / 13
0.22.146 4 / 13
0.22.145 4 / 13
0.22.144 4 / 13
0.22.143 4 / 13
0.22.142 4 / 13
0.22.141 4 / 13
0.22.140 4 / 13
0.22.139 4 / 13
0.22.138 4 / 13
0.22.137 4 / 13
Showing 100 of 202 Next page →

v1.0.52

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.51

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.50

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.