← Home

@optique/core

npm Repository Homepage
72
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

hongminhee

Keywords

CLIcommand-linecommandlineparsergetoptoptparse

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:cors AI (typosquat): @optique/core is a scoped CLI parser package with no relation to the 'cors' HTTP middleware. The Levenshtein match is coincidental; no impersonation risk exists. ai

Versions (showing 72 of 72)

Version Deps Published
1.0.2 0 / 4
1.0.1 0 / 4
1.0.0 0 / 4
0.10.7 0 / 3
0.10.6 0 / 3
0.10.5 0 / 3
0.10.4 0 / 3
0.10.3 0 / 3
0.10.2 0 / 3
0.10.1 0 / 3
0.10.0 0 / 3
0.9.11 0 / 3
0.9.10 0 / 3
0.9.9 0 / 3
0.9.8 0 / 3
0.9.7 0 / 3
0.9.6 0 / 3
0.9.5 0 / 3
0.9.4 0 / 3
0.9.3 0 / 3
0.9.2 0 / 3
0.9.1 0 / 3
0.9.0 0 / 3
0.8.17 0 / 3
0.8.16 0 / 3
0.8.15 0 / 3
0.8.14 0 / 3
0.8.13 0 / 3
0.8.12 0 / 3
0.8.11 0 / 3
0.8.10 0 / 3
0.8.9 0 / 3
0.8.8 0 / 3
0.8.7 0 / 3
0.8.6 0 / 3
0.8.5 0 / 3
0.8.4 0 / 3
0.8.3 0 / 3
0.8.2 0 / 3
0.8.1 0 / 3
0.8.0 0 / 3
0.7.19 0 / 3
0.7.18 0 / 3
0.7.17 0 / 3
0.7.16 0 / 3
0.7.15 0 / 3
0.7.14 0 / 3
0.7.13 0 / 3
0.7.12 0 / 3
0.7.11 0 / 3
0.7.10 0 / 3
0.7.9 0 / 3
0.7.8 0 / 3
0.7.7 0 / 3
0.7.6 0 / 3
0.7.5 0 / 3
0.7.4 0 / 3
0.7.3 0 / 3
0.7.2 0 / 3
0.7.1 0 / 3
0.7.0 0 / 3
0.6.11 0 / 3
0.6.10 0 / 3
0.6.9 0 / 3
0.6.8 0 / 3
0.6.7 0 / 3
0.6.6 0 / 3
0.6.5 0 / 3
0.6.4 0 / 3
0.6.3 0 / 3
0.6.2 0 / 3
0.5.3 0 / 3

v1.0.2

2 findings
HIGH typosquat.levenshtein: Possible typosquat of 'cors' typosquat

Package name '@optique/core' is 1 edit(s) away from popular package 'cors'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.10.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.9.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.