@lodestar/fork-choice Apache-2.0 71 versions

@lodestar/fork-choice

npm Repository Homepage

A Typescript implementation Ethereum Consensus fork choice

71

Versions

Apache-2.0

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

wemeetagainmatthewkeiljoshdougallkalambet

Keywords

ethereumeth-consensusbeaconblockchain

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): Publisher changed from human account to GitHub Actions CI/CD with SLSA attestation — this is a security improvement, not a compromise signal, for this ChainSafe monorepo package.	ai	2026/04/26
phantom-deps	phantom-dep:@chainsafe/ssz	AI (phantom-deps): @chainsafe/ssz is explicitly listed as a direct dependency in package.json; phantom detection is a false positive likely due to indirect/config-only usage pattern.	ai	2026/04/26
provenance	slsa-provenance	AI (provenance): Lodestar is published via GitHub Actions CI/CD with Sigstore SLSA attestation; this is the expected and stable publish flow for this package.	ai	2026/04/25

Versions (showing 71 of 71)

Version	Deps	Published
1.45.0	6 / 0	2026-07-27
1.44.0	6 / 0	2026-07-01
1.43.0	6 / 0	2026-05-20
1.42.0	6 / 0	2026-04-13
1.41.1	6 / 0	2026-04-01
1.41.0	6 / 0	2026-03-19
1.40.0	6 / 0	2026-02-11
1.39.1	6 / 0	2026-01-30
1.39.0	6 / 0	2026-01-28
1.38.0	6 / 0	2025-12-15
1.37.0	6 / 0	2025-12-01
1.36.0	6 / 0	2025-11-04
1.35.0	6 / 0	2025-10-08
1.34.1	6 / 0	2025-09-10
1.34.0	6 / 0	2025-09-10
1.33.0	6 / 0	2025-08-06
1.32.0	6 / 0	2025-07-15
1.31.0	6 / 0	2025-06-03
1.30.0	6 / 0	2025-05-14
1.29.0	6 / 0	2025-04-21
1.28.1	6 / 0	2025-03-20
1.28.0	6 / 0	2025-03-19
1.27.1	6 / 0	2025-02-24
1.27.0	6 / 0	2025-02-13
1.26.0	6 / 0	2025-02-04
1.25.0	6 / 0	2025-01-14
1.24.0	6 / 0	2024-12-20
1.23.1	6 / 0	2024-11-29
1.23.0	6 / 0	2024-11-11
1.22.0	6 / 0	2024-09-17
1.21.0	6 / 0	2024-08-08
1.20.2	6 / 0	2024-07-19
1.20.1	6 / 0	2024-07-16
1.20.0	6 / 0	2024-07-11
1.19.0	6 / 0	2024-06-07
1.18.1	6 / 0	2024-05-13
1.18.0	6 / 0	2024-04-23
1.17.0	6 / 0	2024-03-11
1.16.0	6 / 0	2024-02-22
1.15.1	6 / 0	2024-02-07
1.15.0	6 / 0	2024-01-29
1.14.0	6 / 0	2024-01-16
1.13.0	6 / 0	2023-12-21
1.12.1	6 / 0	2023-12-12
1.12.0	6 / 0	2023-11-09
1.11.3	6 / 0	2023-09-25
1.11.2	6 / 0	2023-09-25
1.11.1	6 / 0	2023-09-02
1.11.0	6 / 0	2023-08-29
1.10.0	6 / 0	2023-08-03
1.9.2	6 / 0	2023-07-18
1.9.1	6 / 0	2023-06-30
1.9.0	6 / 0	2023-06-22
1.8.0	6 / 0	2023-05-04
1.7.2	6 / 0	2023-03-30
1.7.1	6 / 0	2023-03-30
1.7.0	6 / 0	2023-03-28
1.6.0	6 / 0	2023-03-21
1.5.1	6 / 0	2023-03-10
1.5.0	6 / 0	2023-02-27
1.4.3	6 / 0	2023-02-13
1.4.2	6 / 0	2023-02-07
1.4.1	6 / 0	2023-02-01
1.4.0	6 / 0	2023-01-30
1.3.0	6 / 0	2023-01-03
1.2.2	6 / 0	2022-11-23
1.2.1	6 / 0	2022-11-11
1.2.0	6 / 0	2022-11-09
1.1.1	6 / 0	2022-10-19
1.1.0	6 / 0	2022-09-23
1.0.0	6 / 0	2022-08-23

v1.45.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.44.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.29.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.28.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.28.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.27.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.27.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.26.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.25.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.24.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.23.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.23.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.22.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.21.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.20.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.20.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.20.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.19.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.18.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.18.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.17.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.15.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.15.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.14.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.13.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.12.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.12.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.11.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.11.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.11.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.11.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.10.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.9.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.9.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.9.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.8.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.7.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.7.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.7.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.6.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.4.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.4.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.4.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.4.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.