← Home

@quatrain/messaging

19
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

crapougnaxelliottlepine

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): SLSA provenance attestation present; missing gitHead is superseded by Sigstore CI/CD attestation for this package. ai
dependencies unvetted-dep:@quatrain/core AI (dependencies): Same-org sibling package from Quatrain; stable dependency relationship across versions. ai
license copyleft-license:AGPL-3.0-only AI (license): Intentional AGPL-3.0-only license declared explicitly by the package author; stable for this package. ai

Versions (showing 19 of 19)

Version Deps Published
1.1.5 2 / 11
1.1.4 2 / 11
1.1.3 2 / 11
1.1.2 2 / 11
1.1.1 2 / 11
1.0.14 2 / 11
1.0.13 2 / 11
1.0.12 2 / 11
1.0.11 2 / 11
1.0.10 2 / 11
1.0.9 2 / 11
1.0.8 2 / 11
1.0.7 2 / 11
1.0.6 2 / 11
1.0.5 2 / 11
1.0.4 2 / 11
1.0.3 2 / 11
1.0.2 2 / 11
1.0.1 1 / 10