← Home

@pagopa/dx-savemoney

npm Repository
19
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

pp-psgiuseppe-nuccio-creadiego.lagosmorales

Keywords

azuretypescriptfinopsDX

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern new-deps-added AI (publish-pattern): New deps are official Azure SDK + well-known CLI table library; consistent with the package's Azure FinOps purpose. ai
dependencies unvetted-dep:@azure/arm-monitor AI (dependencies): Official Microsoft Azure SDK package; consistent with this Azure resource analyzer tool's purpose. ai

Versions (showing 19 of 19)

Version Deps Published
0.5.0 13 / 9
0.4.0 13 / 9
0.3.3 13 / 9
0.3.2 13 / 9
0.3.1 13 / 9
0.3.0 13 / 9
0.2.6 11 / 9
0.2.5 10 / 9
0.2.4 10 / 9
0.2.3 10 / 9
0.2.2 10 / 9
0.2.1 10 / 9
0.2.0 10 / 9
0.1.6 8 / 8
0.1.5 8 / 8
0.1.4 8 / 8
0.1.3 8 / 8
0.1.2 8 / 8
0.1.1 7 / 8

v0.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.