← Home

@libp2p/daemon-client

npm Repository Homepage

libp2p-daemon client implementation

33
Versions
Apache-2.0 OR MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

daviddiasalanshawachingbrainvascosantosnpm-service-account-libp2pjacobheun

Keywords

libp2p

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from achingbrain to GitHub Actions CI/CD is a legitimate automation migration, backed by SLSA provenance attestation. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy explained by monorepo CI migration; SLSA attestation and unchanged code confirm no takeover. ai

Versions (showing 33 of 33)

Version Deps Published
10.0.33 8 / 10
10.0.32 8 / 10
10.0.31 8 / 10
10.0.30 8 / 10
10.0.29 8 / 10
10.0.28 8 / 10
10.0.27 8 / 10
10.0.26 8 / 10
10.0.25 8 / 10
10.0.24 8 / 10
10.0.23 8 / 10
10.0.22 8 / 10
10.0.21 8 / 10
10.0.20 8 / 10
10.0.19 8 / 10
10.0.17 8 / 10
10.0.16 8 / 10
10.0.15 8 / 10
10.0.14 8 / 10
10.0.13 8 / 10
10.0.12 8 / 10
10.0.11 8 / 10
10.0.10 8 / 10
10.0.9 8 / 10
10.0.8 8 / 10
10.0.7 8 / 10
10.0.6 8 / 10
10.0.5 8 / 10
10.0.4 8 / 10
10.0.3 8 / 10
10.0.2 8 / 10
10.0.1 8 / 10
10.0.0 8 / 10

v10.0.33

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.0.32

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.0.31

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.