← Home

@jbrowse/mobx-state-tree

npm Repository Homepage
33
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

garrettjstevensrbuelscmdcolin

Keywords

mobxmobx-state-treepromisereactivefrpfunctional-reactive-programmingstate management

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing with SLSA attestation; expected for this GMOD-maintained package. ai

Versions (showing 33 of 33)

Version Deps Published
5.13.0 0 / 15
5.12.0 0 / 15
5.11.2 0 / 15
5.11.1 0 / 14
5.11.0 0 / 14
5.10.8 0 / 14
5.10.7 0 / 14
5.10.6 0 / 14
5.10.5 0 / 14
5.10.4 0 / 14
5.10.3 0 / 14
5.10.2 0 / 14
5.10.1 0 / 14
5.10.0 0 / 14
5.9.3 0 / 14
5.9.2 0 / 14
5.9.1 0 / 14
5.9.0 0 / 14
5.8.7 0 / 14
5.8.6 0 / 14
5.7.1 0 / 11
5.7.0 0 / 11
5.6.10 0 / 11
5.6.9 0 / 11
5.6.6 0 / 11
5.6.3 0 / 11
5.6.2 0 / 11
5.6.0 0 / 16
5.5.0 0 / 15
5.4.7 0 / 15
5.4.6 0 / 15
5.4.5 0 / 16
5.4.4 0 / 15

v5.13.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.12.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.11.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.