← Home

@liflig/cdk-lambda-config

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

capra-cijol-capraconsultinghalvorlinder-cevan-boonesondrehavsba.capraconsulting

Keywords

cdklambdaconfig

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from capra-ci to GitHub Actions is consistent with org's CI migration; SLSA provenance attestation confirms legitimate CI publish. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy followed by CI-attested publish with no code changes; consistent with low-activity maintenance package. ai

Versions (showing 51 of 87)

View all versions
Version Deps Published
1.7.36 0 / 23
1.7.35 0 / 23
1.7.34 0 / 23
1.7.33 0 / 23
1.7.32 0 / 23
1.7.31 0 / 23
1.7.30 0 / 23
1.7.29 0 / 23
1.7.28 0 / 23
1.7.27 0 / 23
1.7.26 0 / 23
1.7.25 0 / 23
1.7.24 0 / 23
1.7.23 0 / 23
1.7.22 0 / 23
1.7.21 0 / 23
1.7.20 0 / 23
1.7.19 0 / 23
1.7.18 0 / 23
1.7.17 0 / 23
1.7.16 0 / 23
1.7.15 0 / 23
1.7.14 0 / 23
1.7.13 0 / 23
1.7.12 0 / 23
1.7.11 0 / 23
1.7.10 0 / 23
1.7.9 0 / 23
1.7.8 0 / 23
1.7.7 0 / 23
1.7.6 0 / 23
1.7.5 0 / 23
1.7.4 0 / 23
1.7.3 0 / 23
1.7.2 0 / 23
1.7.1 0 / 23
1.7.0 0 / 23
1.6.0 0 / 23
1.5.23 0 / 30
1.5.22 0 / 30
1.5.21 0 / 30
1.5.20 0 / 30
1.5.19 0 / 30
1.5.18 0 / 30
1.5.17 0 / 30
1.5.16 0 / 30
1.5.15 0 / 30
1.5.14 0 / 30
1.5.13 0 / 30
1.5.12 0 / 30
1.5.11 0 / 30

v1.5.17

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.16

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.15

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.5.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.5.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.