@polkadot-api/signers-common
28
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
volivajosepot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Package has full SLSA provenance attestation via Sigstore, which provides stronger integrity guarantees than gitHead. The publish environment change is consistent with CI/CD pipeline evolution for this established package. | ai | |
| provenance | publisher-changed | AI (provenance): voliva is a long-standing contributor (88 approved packages, 566 days) in the polkadot-api org; transition from josepot is a legitimate handoff. SLSA provenance confirms CI/CD build integrity. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Monorepo sub-package; short README and missing keywords are expected for internal scoped packages, not spam indicators. | ai | |
| phantom-deps | phantom-dep:@polkadot-api/polkadot-signer | AI (phantom-deps): Same-org scoped dependency declared but not directly imported; consistent with monorepo type re-export patterns, not a security concern. | ai |
Versions (showing 28 of 28)
| Version | Deps | Published |
|---|---|---|
| 0.2.3 | 4 / 1 | |
| 0.2.2 | 4 / 1 | |
| 0.2.1 | 4 / 1 | |
| 0.2.0 | 4 / 1 | |
| 0.1.22 | 4 / 1 | |
| 0.1.21 | 4 / 1 | |
| 0.1.20 | 4 / 1 | |
| 0.1.19 | 4 / 1 | |
| 0.1.18 | 4 / 1 | |
| 0.1.17 | 4 / 1 | |
| 0.1.16 | 4 / 1 | |
| 0.1.15 | 4 / 1 | |
| 0.1.14 | 4 / 1 | |
| 0.1.13 | 4 / 1 | |
| 0.1.12 | 4 / 1 | |
| 0.1.11 | 4 / 1 | |
| 0.1.10 | 4 / 1 | |
| 0.1.9 | 4 / 1 | |
| 0.1.8 | 4 / 1 | |
| 0.1.7 | 4 / 1 | |
| 0.1.6 | 4 / 1 | |
| 0.1.5 | 4 / 1 | |
| 0.1.4 | 4 / 1 | |
| 0.1.3 | 4 / 1 | |
| 0.1.2 | 4 / 1 | |
| 0.1.1 | 4 / 1 | |
| 0.1.0 | 4 / 1 | |
| 0.0.1 | 4 / 1 |