← Home

@preact/signals

npm Repository Homepage
32
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

preactjsdevelopitmarvinhagemeisterdrewiggjdecroockrschristian

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Legitimate CI/CD migration from individual to GitHub Actions with SLSA provenance for @preact org. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy consistent with stable mature package; CI/CD migration explains the new publish. ai

Versions (showing 32 of 32)

Version Deps Published
2.10.0 1 / 2
2.9.4 1 / 2
2.9.3 1 / 2
2.9.2 1 / 2
2.9.1 1 / 2
2.9.0 1 / 2
2.8.2 1 / 2
2.8.1 1 / 2
2.8.0 1 / 2
2.7.1 1 / 2
2.7.0 1 / 2
2.6.2 1 / 2
2.6.1 1 / 2
2.6.0 1 / 2
2.5.1 1 / 2
2.5.0 1 / 2
2.4.0 1 / 2
2.3.2 1 / 2
2.3.1 1 / 2
2.3.0 1 / 2
2.2.1 1 / 2
2.2.0 1 / 2
2.1.1 1 / 2
2.1.0 1 / 2
2.0.5 1 / 2
2.0.4 1 / 2
2.0.3 1 / 2
2.0.2 1 / 2
2.0.1 1 / 2
2.0.0 1 / 2
1.3.4 1 / 2
1.3.3 1 / 2

v2.10.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.9.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.9.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.