@learncard/network-brain-client
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from personal account to GitHub Actions CI/CD is a legitimate automation upgrade, backed by SLSA provenance attestation. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy followed by CI/CD-published release with SLSA attestation; consistent with project resumption under automation. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Intentionally empty description in a monorepo package; stable pattern across versions. | ai |
Versions (showing 51 of 128)
| Version | Deps | Published |
|---|---|---|
| 2.5.42 | 2 / 4 | |
| 2.5.41 | 2 / 4 | |
| 2.5.40 | 2 / 4 | |
| 2.5.39 | 2 / 4 | |
| 2.5.38 | 2 / 4 | |
| 2.5.37 | 2 / 4 | |
| 2.5.36 | 2 / 4 | |
| 2.5.35 | 2 / 4 | |
| 2.5.34 | 2 / 4 | |
| 2.5.33 | 2 / 4 | |
| 2.5.32 | 2 / 4 | |
| 2.5.31 | 2 / 4 | |
| 2.5.30 | 2 / 4 | |
| 2.5.27 | 2 / 4 | |
| 2.5.26 | 2 / 4 | |
| 2.5.25 | 2 / 4 | |
| 2.5.24 | 2 / 4 | |
| 2.5.21 | 2 / 4 | |
| 2.5.20 | 2 / 4 | |
| 2.5.19 | 2 / 4 | |
| 2.5.18 | 2 / 4 | |
| 2.5.17 | 2 / 4 | |
| 2.5.16 | 2 / 4 | |
| 2.5.15 | 2 / 4 | |
| 2.5.14 | 2 / 4 | |
| 2.5.13 | 2 / 4 | |
| 2.5.12 | 2 / 4 | |
| 2.5.8 | 2 / 4 | |
| 2.5.7 | 2 / 4 | |
| 2.5.6 | 2 / 4 | |
| 2.5.4 | 2 / 4 | |
| 2.5.3 | 2 / 4 | |
| 2.5.2 | 2 / 4 | |
| 2.4.19 | 2 / 4 | |
| 2.4.18 | 2 / 4 | |
| 2.4.16 | 2 / 4 | |
| 2.4.15 | 2 / 4 | |
| 2.4.14 | 2 / 4 | |
| 2.4.13 | 2 / 4 | |
| 2.4.12 | 2 / 4 | |
| 2.4.9 | 2 / 4 | |
| 2.4.8 | 2 / 4 | |
| 2.4.7 | 2 / 4 | |
| 2.4.6 | 2 / 4 | |
| 2.4.5 | 2 / 4 | |
| 2.4.4 | 2 / 4 | |
| 2.4.3 | 2 / 4 | |
| 2.4.2 | 2 / 4 | |
| 2.4.1 | 2 / 4 | |
| 2.4.0 | 2 / 4 | |
| 2.3.28 | 2 / 4 |
v2.5.42
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.5.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.