← Home

@owenlamont/ryl

Fast YAML linter inspired by yamllint

26
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

owenrlamont

Keywords

yamllintclirust

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): CI-published packages via GitHub Actions with SLSA attestation often omit gitHead; provenance attestation provides stronger commit linkage. ai
source-diff source-size-tripled AI (source-diff): Size increase reflects adding real CLI wrapper code; consistent with Rust binary distribution pattern and platform optional deps. ai
provenance publisher-changed AI (provenance): Transition to GitHub Actions publisher with SLSA attestation is a legitimate CI/CD migration, not a compromise. ai
semgrep semgrep:child-process-import AI (semgrep): CLI wrapper that spawns platform-specific native Rust binary; child_process use is expected and documented by package structure. ai

Versions (showing 26 of 26)

Version Deps Published
0.20.0 0 / 0
0.19.1 0 / 0
0.19.0 0 / 0
0.18.1 0 / 0
0.18.0 0 / 0
0.17.0 0 / 0
0.16.0 0 / 0
0.15.0 0 / 0
0.14.0 0 / 0
0.13.0 0 / 0
0.12.0 0 / 0
0.11.0 0 / 0
0.10.2 0 / 0
0.10.1 0 / 0
0.10.0 0 / 0
0.9.2 0 / 0
0.9.1 0 / 0
0.9.0 0 / 0
0.8.0 0 / 0
0.7.0 0 / 0
0.6.0 0 / 0
0.5.0 0 / 0
0.4.4 0 / 0
0.4.3 0 / 0
0.4.2 0 / 0
0.4.1 0 / 0