← Home

@mastra/cloudflare-d1

npm Repository Homepage

D1 provider for Mastra - includes db storage capabilities

11
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

abhiaiyersmthomasrase-calcsamnikaiyertylerbarneswardpeet

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-removed AI (maintainer-change): Large mastra-ai monorepo published via GitHub Actions CI; maintainer churn reflects org automation, not takeover. ai
bogus-package bogus-package AI (bogus-package): Legitimate monorepo package; mass-production signal reflects templated mastra sub-packages, not spam. ai
phantom-deps phantom-dep:easy-day-js AI (phantom-deps): Phantom-dep rule cannot auto-block per policy; flagged in rationale instead. ai
dependencies unvetted-dep:cloudflare AI (dependencies): Official Cloudflare SDK; expected and appropriate dependency for a Cloudflare D1 storage provider. ai

Versions (showing 11 of 11)

Version Deps Published
1.1.1 1 / 15
1.1.0 1 / 15
1.0.6 1 / 14
1.0.5 1 / 14
1.0.4 1 / 14
1.0.3 1 / 14
1.0.2 1 / 14
1.0.1 1 / 14
1.0.0 1 / 14
0.13.9 1 / 13
0.13.8 1 / 13

v1.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.