@polkadot-api/cli
Add a chain by using the add command
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): SLSA provenance attestation present; gitHead absence is superseded by stronger CI/CD integrity signal. | ai | |
| provenance | publisher-changed | AI (provenance): voliva is the documented author in package.json; same org repo; 477 approved packages, no rejections. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @polkadot-api/ws-middleware is same-org scope, consistent with this package's dependency pattern. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): Type-only package; never directly imported, loaded by convention. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @polkadot-api/cli vs 'joi' is a meaningless Levenshtein match; no impersonation intent. | ai | |
| phantom-deps | phantom-dep:@polkadot-api/json-rpc-provider | AI (phantom-deps): Same-org scoped package; used indirectly through other @polkadot-api deps. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): commander is a CLI framework dependency; used transitively or via @commander-js/extra-typings. | ai | |
| phantom-deps | phantom-dep:typescript | AI (phantom-deps): typescript is a build-time dep for a CLI that compiles user code; expected not to be directly imported. | ai |
Versions (showing 100 of 108)
| Version | Deps | Published |
|---|---|---|
| 0.21.9 | 27 / 2 | |
| 0.21.8 | 27 / 2 | |
| 0.21.7 | 27 / 2 | |
| 0.21.6 | 27 / 2 | |
| 0.21.5 | 27 / 2 | |
| 0.21.4 | 27 / 2 | |
| 0.21.3 | 27 / 2 | |
| 0.21.2 | 27 / 2 | |
| 0.21.1 | 27 / 2 | |
| 0.21.0 | 27 / 2 | |
| 0.20.4 | 27 / 2 | |
| 0.20.3 | 27 / 2 | |
| 0.20.2 | 27 / 2 | |
| 0.20.1 | 27 / 2 | |
| 0.20.0 | 27 / 2 | |
| 0.19.4 | 26 / 2 | |
| 0.19.3 | 26 / 2 | |
| 0.19.2 | 26 / 2 | |
| 0.19.1 | 26 / 2 | |
| 0.19.0 | 26 / 2 | |
| 0.18.1 | 27 / 2 | |
| 0.18.0 | 27 / 2 | |
| 0.17.1 | 27 / 2 | |
| 0.17.0 | 27 / 2 | |
| 0.16.3 | 27 / 2 | |
| 0.16.2 | 27 / 2 | |
| 0.16.1 | 27 / 2 | |
| 0.16.0 | 27 / 2 | |
| 0.15.10 | 27 / 2 | |
| 0.15.9 | 27 / 2 | |
| 0.15.8 | 27 / 2 | |
| 0.15.7 | 27 / 2 | |
| 0.15.6 | 27 / 2 | |
| 0.15.5 | 27 / 2 | |
| 0.15.4 | 27 / 2 | |
| 0.15.3 | 27 / 2 | |
| 0.15.2 | 27 / 2 | |
| 0.15.1 | 27 / 2 | |
| 0.15.0 | 27 / 2 | |
| 0.14.15 | 27 / 2 | |
| 0.14.14 | 27 / 2 | |
| 0.14.13 | 28 / 2 | |
| 0.14.12 | 28 / 2 | |
| 0.14.11 | 28 / 2 | |
| 0.14.10 | 28 / 2 | |
| 0.14.9 | 28 / 2 | |
| 0.14.8 | 26 / 2 | |
| 0.14.7 | 26 / 2 | |
| 0.14.6 | 26 / 2 | |
| 0.14.5 | 26 / 2 | |
| 0.14.4 | 26 / 2 | |
| 0.14.3 | 26 / 2 | |
| 0.14.2 | 26 / 2 | |
| 0.14.1 | 26 / 2 | |
| 0.14.0 | 26 / 2 | |
| 0.13.4 | 26 / 2 | |
| 0.13.3 | 26 / 2 | |
| 0.13.2 | 26 / 2 | |
| 0.13.1 | 26 / 1 | |
| 0.13.0 | 26 / 1 | |
| 0.12.2 | 26 / 1 | |
| 0.12.1 | 26 / 1 | |
| 0.12.0 | 26 / 1 | |
| 0.11.13 | 26 / 1 | |
| 0.11.12 | 26 / 1 | |
| 0.11.11 | 26 / 1 | |
| 0.11.10 | 26 / 1 | |
| 0.11.9 | 26 / 1 | |
| 0.11.8 | 26 / 1 | |
| 0.11.7 | 26 / 1 | |
| 0.11.6 | 26 / 1 | |
| 0.11.5 | 26 / 1 | |
| 0.11.4 | 26 / 1 | |
| 0.11.3 | 26 / 1 | |
| 0.11.2 | 26 / 1 | |
| 0.11.1 | 26 / 1 | |
| 0.11.0 | 26 / 1 | |
| 0.10.3 | 26 / 1 | |
| 0.10.2 | 26 / 1 | |
| 0.10.1 | 26 / 1 | |
| 0.10.0 | 26 / 1 | |
| 0.9.23 | 26 / 1 | |
| 0.9.22 | 26 / 1 | |
| 0.9.21 | 26 / 1 | |
| 0.9.20 | 26 / 1 | |
| 0.9.19 | 26 / 1 | |
| 0.9.18 | 26 / 1 | |
| 0.9.17 | 26 / 1 | |
| 0.9.16 | 26 / 1 | |
| 0.9.15 | 26 / 1 | |
| 0.9.14 | 26 / 1 | |
| 0.9.13 | 26 / 1 | |
| 0.9.12 | 26 / 1 | |
| 0.9.11 | 26 / 1 | |
| 0.9.10 | 26 / 1 | |
| 0.9.9 | 26 / 1 | |
| 0.9.8 | 26 / 1 | |
| 0.9.7 | 26 / 1 | |
| 0.9.6 | 26 / 1 | |
| 0.9.5 | 25 / 1 |
v0.21.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.21.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.21.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.11.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.11.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.10.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.23
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.22
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.21
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.15
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.9.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.