@parity/product-sdk-host
Host container detection and storage access for Polkadot Desktop and Mobile environments
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@parity/result | AI (dependencies): Same-org sibling package from trusted paritytech-ci publisher. | ai | |
| dependencies | unvetted-dep:@parity/product-sdk-errors | AI (dependencies): Same-org sibling package from trusted paritytech-ci publisher. | ai | |
| dependencies | unvetted-dep:@parity/truapi | AI (dependencies): First-party @parity scoped package published by the same paritytech-ci publisher; low risk. | ai |
Versions (showing 22 of 22)
| Version | Deps | Published |
|---|---|---|
| 0.14.1 | 8 / 3 | |
| 0.14.0 | 8 / 3 | |
| 0.13.0 | 8 / 3 | |
| 0.12.0 | 6 / 3 | |
| 0.11.0 | 4 / 3 | |
| 0.10.3 | 4 / 3 | |
| 0.10.2 | 4 / 3 | |
| 0.10.1 | 4 / 3 | |
| 0.10.0 | 4 / 3 | |
| 0.9.0 | 2 / 4 | |
| 0.8.0 | 2 / 4 | |
| 0.7.1 | 2 / 4 | |
| 0.7.0 | 2 / 4 | |
| 0.6.1 | 2 / 4 | |
| 0.6.0 | 2 / 4 | |
| 0.5.0 | 2 / 4 | |
| 0.4.0 | 2 / 4 | |
| 0.3.0 | 2 / 4 | |
| 0.2.2 | 2 / 4 | |
| 0.2.1 | 2 / 4 | |
| 0.2.0 | 2 / 4 | |
| 0.1.0 | 2 / 4 |
v0.14.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.14.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.13.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.12.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.