← Home

@libp2p/pnet

npm Repository Homepage

Implementation of Connection protection management via a shared secret

26
Versions
Apache-2.0 OR MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

daviddiasalanshawachingbrainvascosantosnpm-service-account-libp2pjacobheun

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff encoded-string-file:dist/index.min.js AI (source-diff): Encoded string is a base64 WebAssembly binary for xsalsa20 crypto; expected artifact for this pnet package. ai
typosquat typosquat.levenshtein:next AI (typosquat): Scoped @libp2p package; edit-distance match to 'next' is a false positive. ai
typosquat typosquat.levenshtein:knex AI (typosquat): Scoped @libp2p package; edit-distance match to 'knex' is a false positive. ai

Versions (showing 26 of 26)

Version Deps Published
3.0.26 5 / 3
3.0.25 5 / 3
3.0.24 5 / 3
3.0.23 5 / 3
3.0.22 6 / 3
3.0.21 6 / 3
3.0.20 6 / 3
3.0.19 6 / 3
3.0.18 6 / 3
3.0.16 6 / 3
3.0.15 6 / 3
3.0.14 6 / 3
3.0.13 6 / 3
3.0.12 6 / 3
3.0.11 6 / 3
3.0.10 6 / 3
3.0.9 6 / 3
3.0.8 6 / 3
3.0.7 6 / 3
3.0.6 6 / 3
3.0.5 6 / 3
3.0.4 6 / 3
3.0.3 6 / 3
3.0.2 6 / 3
3.0.1 6 / 3
3.0.0 6 / 3

v3.0.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.0.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.0.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.