← Home

@openclaw/synology-chat

Synology Chat channel plugin for OpenClaw

24
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

steipetevincentkoc

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Package publishes via GitHub Actions CI with SLSA attestation; automated publisher is the intended release mechanism. ai
maintainer-change maintainer-added AI (maintainer-change): Maintainer addition consistent with org-level transition; SLSA provenance backs legitimacy. ai
semgrep semgrep:env-spread AI (semgrep): Fires in a test file saving/restoring env vars — standard test setup pattern, not a secret leak risk. ai

Versions (showing 24 of 24)

Version Deps Published
2026.7.1 1 / 0
2026.6.33 1 / 0
2026.6.11 1 / 0
2026.6.10 1 / 0
2026.6.9 1 / 0
2026.6.8 1 / 0
2026.6.6 1 / 0
2026.6.5 1 / 0
2026.6.1 1 / 0
2026.5.28 1 / 0
2026.5.27 1 / 0
2026.5.26 1 / 0
2026.5.22 1 / 0
2026.5.20 1 / 1
2026.5.19 1 / 1
2026.5.18 1 / 1
2026.5.12 1 / 1
2026.5.7 1 / 1
2026.5.6 1 / 1
2026.5.5 1 / 1
2026.5.4 1 / 1
2026.5.3 1 / 1
2026.5.2 1 / 1
2026.2.22 1 / 1

v2026.7.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.6.33

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.6.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.6.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.