← Home

@opentelemetry/instrumentation-amqplib

npm Repository Homepage
21
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

dyladanpichlermarcoverbalancenpmjs-accounttrentmmartinkuba

Keywords

amqplibopentelemetryrabbitmqAMQP 0-9-1

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from individual maintainer to GitHub Actions CI/CD; expected for OpenTelemetry monorepo. ai
publish-pattern dormant-publish AI (publish-pattern): Monorepo release cadence; dormancy is normal for this package. ai

Versions (showing 21 of 21)

Version Deps Published
0.66.0 3 / 6
0.65.0 3 / 6
0.64.0 3 / 6
0.63.0 3 / 6
0.62.0 3 / 6
0.61.0 3 / 6
0.60.0 3 / 6
0.59.0 3 / 6
0.58.0 3 / 6
0.57.0 3 / 6
0.56.0 3 / 6
0.55.0 2 / 15
0.54.0 2 / 15
0.53.0 2 / 15
0.52.3 2 / 15
0.52.2 2 / 15
0.52.0 3 / 15
0.51.0 3 / 15
0.50.0 3 / 14
0.49.0 3 / 14
0.48.0 3 / 14

v0.66.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.65.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.64.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.62.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.61.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.49.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.