← Home

@instantdb/react

npm Repository Homepage

Instant DB for React

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

stopachkanezajdwwdrew-h

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed from personal account to GitHub Actions CI/CD with SLSA provenance attestation — a supply chain improvement for this established InstantDB package. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer restructuring consistent with transition to GitHub Actions publishing; package has SLSA attestation and matches official InstantDB GitHub org. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy followed by resumption with SLSA-attested CI/CD publishing for an established 950-day-old package with 77.8k weekly downloads; consistent with legitimate development pause. ai
dependencies unvetted-dep:@instantdb/core AI (dependencies): First-party sibling package from the same instantdb monorepo, always published at matching versions. Not a third-party risk. ai
dependencies unvetted-dep:@instantdb/react-common AI (dependencies): First-party sibling package from the same instantdb monorepo, always published at matching versions. Not a third-party risk. ai

Versions (showing 100 of 200)

Version Deps Published
1.0.52 4 / 12
1.0.51 4 / 12
1.0.50 4 / 12
1.0.49 4 / 12
1.0.48 4 / 12
1.0.47 4 / 12
1.0.46 4 / 12
1.0.45 4 / 12
1.0.44 4 / 12
1.0.43 4 / 12
1.0.42 4 / 12
1.0.41 4 / 12
1.0.40 4 / 12
1.0.39 4 / 12
1.0.38 4 / 12
1.0.37 4 / 12
1.0.36 4 / 12
1.0.35 4 / 12
1.0.34 4 / 12
1.0.33 4 / 12
1.0.32 4 / 12
1.0.31 4 / 12
1.0.30 4 / 12
1.0.29 4 / 12
1.0.28 4 / 12
1.0.27 4 / 12
1.0.26 4 / 12
1.0.25 4 / 12
1.0.24 4 / 12
1.0.23 4 / 12
1.0.22 4 / 12
1.0.21 4 / 12
1.0.20 4 / 12
1.0.19 4 / 12
1.0.18 4 / 12
1.0.17 4 / 12
1.0.16 4 / 12
1.0.15 4 / 12
1.0.14 4 / 12
1.0.13 4 / 12
1.0.12 4 / 12
1.0.11 4 / 12
1.0.10 4 / 12
1.0.9 4 / 12
1.0.8 4 / 12
1.0.7 4 / 12
1.0.6 4 / 12
1.0.5 4 / 12
1.0.4 4 / 12
1.0.3 4 / 12
1.0.2 4 / 12
1.0.1 4 / 12
1.0.0 4 / 12
0.22.185 4 / 12
0.22.184 4 / 12
0.22.183 4 / 12
0.22.182 4 / 12
0.22.181 4 / 12
0.22.180 4 / 12
0.22.179 4 / 12
0.22.178 4 / 12
0.22.177 4 / 12
0.22.175 4 / 12
0.22.174 4 / 12
0.22.173 4 / 12
0.22.172 4 / 12
0.22.171 4 / 12
0.22.169 4 / 12
0.22.168 4 / 12
0.22.167 4 / 12
0.22.166 4 / 12
0.22.165 4 / 12
0.22.164 4 / 12
0.22.163 4 / 12
0.22.162 4 / 12
0.22.161 4 / 12
0.22.160 4 / 12
0.22.159 4 / 12
0.22.158 4 / 12
0.22.157 4 / 12
0.22.156 4 / 12
0.22.155 4 / 12
0.22.154 4 / 12
0.22.153 4 / 12
0.22.152 4 / 12
0.22.151 4 / 12
0.22.150 4 / 12
0.22.149 4 / 12
0.22.148 4 / 12
0.22.147 4 / 12
0.22.146 4 / 12
0.22.145 4 / 12
0.22.144 4 / 12
0.22.143 4 / 12
0.22.142 4 / 12
0.22.141 4 / 12
0.22.140 4 / 12
0.22.139 4 / 12
0.22.138 4 / 12
0.22.137 4 / 12
Showing 100 of 200 Next page →

v1.0.52

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.51

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.50

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.