@railway/cli
Develop and deploy code with zero configuration
9
Versions
ISC
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
jakecooperjakerunzerrailway_apphalf0wlthisismahmoud_
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:postinstall | AI (install-scripts): Documented prebuilt-binary fetch pattern using node-fetch+tar; stable for this package across all versions. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @railway/cli is the official Railway CLI; Levenshtein match to 'joi' is a false positive. | ai |
Versions (showing 9 of 9)
| Version | Deps | Published |
|---|---|---|
| 5.30.1 | 3 / 0 | |
| 5.29.0 | 3 / 0 | |
| 5.28.1 | 3 / 0 | |
| 4.65.0 | 3 / 0 | |
| 4.59.0 | 3 / 0 | |
| 4.58.0 | 3 / 0 | |
| 4.44.0 | 3 / 0 | |
| 4.35.2 | 3 / 0 | |
| 4.35.1 | 3 / 0 |
v5.30.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.29.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v5.28.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.