← Home

@onflow/sdk

npm Repository Homepage
27
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

han210dapperjdapper_labsjeffreydoyleharry.ethchasefleminggregorgggturbolent_ffjribbinkbthailenialexsansisyphussmilingkan-flow-foundationmanny.ffmichael_flowlmcmze

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): jribbink is an established publisher (29 approved pkgs, 792 days); transition from dapperj appears to be a legitimate Flow Foundation team change. ai
phantom-deps phantom-dep:deepmerge AI (phantom-deps): deepmerge is a declared runtime dep; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:@babel/runtime AI (phantom-deps): Framework-scoped babel runtime; loaded by convention in bundled output, stable false positive. ai
phantom-deps phantom-dep:@onflow/util-actor AI (phantom-deps): Same-org monorepo dep; phantom-dep heuristic false positive for this package. ai

Versions (showing 27 of 27)

Version Deps Published
1.13.7 15 / 6
1.13.6 15 / 6
1.13.5 15 / 6
1.13.1 15 / 6
1.13.0 15 / 6
1.12.0 15 / 6
1.11.2 15 / 6
1.11.1 15 / 6
1.11.0 15 / 6
1.10.2 15 / 6
1.10.1 15 / 6
1.10.0 15 / 6
1.9.0 15 / 6
1.8.1 14 / 6
1.8.0 14 / 6
1.7.0 14 / 6
1.6.1 14 / 6
1.6.0 14 / 6
1.5.7 14 / 6
1.5.6 14 / 6
1.5.5 14 / 6
1.5.4 14 / 6
1.5.3 14 / 6
1.5.2 14 / 6
1.5.1 14 / 6
1.5.0 14 / 6
1.4.0 14 / 6

v1.8.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.7.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.6.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.6.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.