← Home

@polkadot-api/metadata-builders

42
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

volivajosepot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): voliva is a well-established polkadot-api contributor (43 approved packages, 566 days history) and publishes with SLSA provenance attestation. Transition from josepot is legitimate within the same org. ai
publish-pattern dormant-publish AI (publish-pattern): Package is part of the polkadot-api monorepo; sub-package dormancy is expected when only certain packages are updated. SLSA provenance confirms CI/CD publish integrity. ai
dependencies unvetted-dep:@polkadot-api/utils AI (dependencies): First-party dependency within the polkadot-api monorepo ecosystem; expected internal dependency for this package. ai
dependencies unvetted-dep:@polkadot-api/substrate-bindings AI (dependencies): First-party dependency within the polkadot-api monorepo ecosystem; expected internal dependency for this package. ai

Versions (showing 42 of 42)

Version Deps Published
0.14.3 2 / 1
0.14.2 2 / 1
0.14.1 2 / 1
0.14.0 2 / 1
0.13.11 2 / 1
0.13.10 2 / 1
0.13.9 2 / 1
0.13.8 2 / 1
0.13.7 2 / 1
0.13.6 2 / 1
0.13.5 2 / 1
0.13.4 2 / 1
0.13.3 2 / 1
0.13.2 2 / 1
0.13.1 2 / 1
0.13.0 2 / 1
0.12.2 2 / 1
0.12.1 2 / 1
0.12.0 2 / 1
0.11.0 2 / 1
0.10.2 2 / 1
0.10.1 2 / 1
0.10.0 2 / 1
0.9.3 2 / 1
0.9.2 2 / 1
0.9.1 2 / 1
0.9.0 2 / 1
0.8.2 2 / 1
0.8.1 2 / 1
0.8.0 2 / 1
0.7.1 2 / 1
0.7.0 2 / 1
0.6.0 2 / 1
0.5.0 2 / 1
0.4.1 2 / 1
0.4.0 2 / 1
0.3.2 2 / 1
0.3.1 2 / 1
0.3.0 2 / 1
0.2.0 2 / 1
0.1.0 2 / 1
0.0.1 2 / 1