@reef-knot/types MIT 2 versions

@reef-knot/types

npm Repository Homepage

Versions

MIT

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

lidofinance-grouplidofinance-ui

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
bogus-package	bogus-package	AI (bogus-package): Types-only package; empty main, minimal README, and no description are structural, not spam indicators.	ai	2026/04/29
npm-metadata	no-description	AI (npm-metadata): Established monorepo package; missing description is cosmetic, not a risk signal.	ai	2026/04/29

Version	Deps	Published
5.1.0	0 / 5	2026-07-20
5.0.0	0 / 5	2026-04-27

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.