← Home

@opentelemetry/instrumentation-mongoose

npm Repository Homepage
22
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

dyladanpichlermarcoverbalancenpmjs-accounttrentmmartinkuba

Keywords

mongodbmongooseorminstrumentationnodejsopentelemetrytracing

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from personal publisher (dyladan) to GitHub Actions CI/CD with SLSA attestation from the official OTel repo; expected for this org. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy explained by migration to automated CI publishing; SLSA attestation confirms legitimate source. ai

Versions (showing 22 of 22)

Version Deps Published
0.65.0 3 / 4
0.64.0 3 / 4
0.63.0 3 / 4
0.62.0 3 / 4
0.61.0 3 / 4
0.60.0 3 / 4
0.59.0 3 / 4
0.58.0 3 / 4
0.57.0 3 / 4
0.56.0 3 / 4
0.55.1 2 / 4
0.55.0 2 / 12
0.54.0 2 / 12
0.53.0 2 / 12
0.52.3 2 / 12
0.52.2 2 / 12
0.52.0 3 / 12
0.51.0 3 / 12
0.50.0 3 / 11
0.49.0 3 / 11
0.48.0 3 / 11
0.47.1 3 / 11

v0.65.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.64.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.63.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.61.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.60.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.49.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.47.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.