← Home

@libp2p/opentelemetry-metrics

npm Repository Homepage

Opentelemetry metrics gathering for libp2p

21
Versions
Apache-2.0 OR MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

daviddiasalanshawachingbrainvascosantosnpm-service-account-libp2pjacobheun

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:shady-links-raw-ip AI (semgrep): Localhost IP in JSDoc example for OTLP collector; not executable network code. ai

Versions (showing 21 of 21)

Version Deps Published
2.0.26 3 / 2
2.0.25 3 / 2
2.0.24 3 / 2
2.0.23 3 / 2
2.0.22 3 / 2
2.0.21 3 / 2
2.0.20 3 / 2
2.0.19 3 / 2
2.0.18 3 / 2
2.0.16 3 / 2
2.0.10 3 / 2
2.0.9 3 / 2
2.0.8 3 / 2
2.0.7 3 / 2
2.0.6 3 / 2
2.0.5 3 / 2
2.0.4 3 / 2
2.0.3 3 / 2
2.0.2 3 / 2
2.0.1 3 / 2
2.0.0 3 / 2

v2.0.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.