← Home

@jbrowse/app-core

JBrowse 2 code shared between the 'full featured' apps e.g. jbrowse-web and jbrowse-desktop

23
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

garrettjstevensrbuelscmdcolin

Keywords

jbrowsejbrowse2bionodebiojsgenomics

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): JBrowse migrated publishing to GitHub Actions CI with SLSA attestation; this is a legitimate infra change for the GMOD org. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer roster change consistent with org-level CI migration; no malicious indicators present. ai
provenance missing-githead AI (provenance): Major version bump with build system changes; trusted publisher with strong track record. ai
provenance no-provenance AI (provenance): JBrowse packages consistently publish without Sigstore provenance; stable false positive for this package family. ai

Versions (showing 23 of 23)

Version Deps Published
4.3.0 9 / 0
4.2.1 9 / 0
4.2.0 9 / 0
4.1.15 9 / 0
4.1.14 9 / 0
4.1.13 9 / 0
4.1.12 9 / 0
4.1.11 9 / 0
4.1.10 9 / 0
4.1.9 9 / 0
4.1.8 9 / 0
4.1.7 9 / 0
4.1.6 9 / 0
4.1.5 9 / 0
4.1.4 9 / 0
4.1.3 9 / 0
4.1.1 9 / 0
4.0.4 9 / 0
4.0.3 9 / 0
4.0.2 9 / 0
4.0.1 9 / 0
4.0.0 9 / 0
3.7.0 10 / 0