← Home

@optique/core

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

hongminhee

Keywords

CLIcommand-linecommandlineparsergetoptoptparse

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:cors AI (typosquat): @optique/core is a scoped CLI parser package with no relation to the 'cors' HTTP middleware. The Levenshtein match is coincidental; no impersonation risk exists. ai

Versions (showing 51 of 72)

View all versions
Version Deps Published
1.0.2 0 / 4
1.0.1 0 / 4
1.0.0 0 / 4
0.10.7 0 / 3
0.10.6 0 / 3
0.10.5 0 / 3
0.10.4 0 / 3
0.10.3 0 / 3
0.10.2 0 / 3
0.10.1 0 / 3
0.10.0 0 / 3
0.9.11 0 / 3
0.9.10 0 / 3
0.9.9 0 / 3
0.9.8 0 / 3
0.9.7 0 / 3
0.9.6 0 / 3
0.9.5 0 / 3
0.9.4 0 / 3
0.9.3 0 / 3
0.9.2 0 / 3
0.9.1 0 / 3
0.9.0 0 / 3
0.8.17 0 / 3
0.8.16 0 / 3
0.8.15 0 / 3
0.8.14 0 / 3
0.8.13 0 / 3
0.8.12 0 / 3
0.8.11 0 / 3
0.8.10 0 / 3
0.8.9 0 / 3
0.8.8 0 / 3
0.8.7 0 / 3
0.8.6 0 / 3
0.8.5 0 / 3
0.8.4 0 / 3
0.8.3 0 / 3
0.8.2 0 / 3
0.8.1 0 / 3
0.8.0 0 / 3
0.7.19 0 / 3
0.7.18 0 / 3
0.7.17 0 / 3
0.7.16 0 / 3
0.7.15 0 / 3
0.7.14 0 / 3
0.7.13 0 / 3
0.7.12 0 / 3
0.7.11 0 / 3
0.7.10 0 / 3

v1.0.2

2 findings
HIGH typosquat.levenshtein: Possible typosquat of 'cors' typosquat

Package name '@optique/core' is 1 edit(s) away from popular package 'cors'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.