← Home

@maplibre/geojson-vt

Slice GeoJSON data into vector tiles efficiently

13
Versions
ISC
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

wayofthefutureharelmazormaplibreorgbirkskyummwilsndcommanderstormnyurik

Keywords

spatialgeojsontilesgeometry

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-added AI (maintainer-change): commanderstorm is a known MapLibre org contributor. ai
publish-pattern new-deps-added AI (publish-pattern): kdbush is a well-known spatial index lib by the same original author; stable dep for this package. ai
source-diff large-new-source-files AI (source-diff): src/ directory added to files array; TypeScript sources now shipped alongside dist. ai
source-diff source-size-tripled AI (source-diff): Size increase from shipping src/ alongside dist/; no injected payload. ai
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI/CD with SLSA provenance; legitimate for @maplibre org. ai

Versions (showing 13 of 13)

Version Deps Published
6.1.1 1 / 13
6.1.0 1 / 17
6.0.5 1 / 17
6.0.4 1 / 17
6.0.3 1 / 17
6.0.2 1 / 17
6.0.1 1 / 17
6.0.0 1 / 17
5.0.4 0 / 14
5.0.3 0 / 14
5.0.2 0 / 14
5.0.1 0 / 5
5.0.0 0 / 5

v6.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.