← Home

@malloydata/malloy-filter

npm Repository Homepage

Parsers for the Malloy filtering sub-languages

51
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

malloy-lang-usergmadenscullinmtoy

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing is confirmed by SLSA provenance attestation; stable pattern for this package going forward. ai
phantom-deps phantom-dep:luxon AI (phantom-deps): luxon is a runtime dep used indirectly by parser/filter logic; phantom-dep heuristic is a stable FP for this package. ai
phantom-deps phantom-dep:jest-diff AI (phantom-deps): jest-diff used in test/config context; phantom-dep heuristic is a stable FP for this package. ai

Versions (showing 51 of 190)

View all versions
Version Deps Published
0.0.426 1 / 4
0.0.425 1 / 4
0.0.424 1 / 4
0.0.423 1 / 4
0.0.422 1 / 4
0.0.421 1 / 4
0.0.420 1 / 4
0.0.419 1 / 4
0.0.418 1 / 4
0.0.417 1 / 4
0.0.416 1 / 4
0.0.415 2 / 3
0.0.414 2 / 3
0.0.413 2 / 3
0.0.412 2 / 3
0.0.411 2 / 3
0.0.410 2 / 3
0.0.409 2 / 3
0.0.408 2 / 3
0.0.407 2 / 3
0.0.406 2 / 3
0.0.405 2 / 3
0.0.404 2 / 3
0.0.403 2 / 3
0.0.402 2 / 3
0.0.401 2 / 3
0.0.400 2 / 3
0.0.399 2 / 3
0.0.398 2 / 3
0.0.397 2 / 3
0.0.396 2 / 3
0.0.395 2 / 3
0.0.394 2 / 3
0.0.393 2 / 3
0.0.392 2 / 3
0.0.391 2 / 3
0.0.390 2 / 3
0.0.389 2 / 3
0.0.388 2 / 3
0.0.387 2 / 3
0.0.386 2 / 3
0.0.385 2 / 3
0.0.384 2 / 3
0.0.383 2 / 3
0.0.382 2 / 3
0.0.381 2 / 3
0.0.380 2 / 3
0.0.379 2 / 3
0.0.378 2 / 3
0.0.377 2 / 3
0.0.376 2 / 3

v0.0.426

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.425

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.424

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.423

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.422

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.421

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.