← Home

@noddde/cli

npm Repository Homepage

CLI tool for scaffolding noddde DDD aggregates, projections, and sagas

6
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

dogganidhal

Keywords

dddcqrsevent-sourcingcligeneratorscaffoldtypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:joi AI (typosquat): Scoped package @noddde/cli is a DDD scaffolding CLI, not a typosquat of joi; name similarity is coincidental. ai

Versions (showing 6 of 6)

Version Deps Published
0.3.9 4 / 5
0.3.8 4 / 5
0.3.7 4 / 5
0.3.6 2 / 4
0.3.5 2 / 4
0.3.4 2 / 4

v0.3.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.