@regle/schemas
Schemas adapter for Regle
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
desnoth
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions CI with SLSA attestation; legitimate automation migration for this package. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy followed by CI/CD migration with SLSA provenance; consistent with legitimate workflow change. | ai | |
| phantom-deps | phantom-dep:@regle/rules | AI (phantom-deps): Same-org monorepo dependency; declared in package.json as runtime dep, phantom detection is a false positive. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established library with 215 versions and SLSA provenance; README links are docs, not phishing. | ai |
Versions (showing 51 of 139)
| Version | Deps | Published |
|---|---|---|
| 1.28.5 | 4 / 14 | |
| 1.28.4 | 4 / 14 | |
| 1.28.3 | 4 / 14 | |
| 1.28.2 | 4 / 14 | |
| 1.28.1 | 4 / 14 | |
| 1.28.0 | 4 / 12 | |
| 1.27.2 | 4 / 12 | |
| 1.27.1 | 4 / 12 | |
| 1.27.0 | 4 / 12 | |
| 1.26.1 | 4 / 12 | |
| 1.26.0 | 4 / 12 | |
| 1.25.2 | 4 / 12 | |
| 1.25.1 | 4 / 12 | |
| 1.25.0 | 4 / 12 | |
| 1.24.3 | 4 / 12 | |
| 1.24.2 | 4 / 12 | |
| 1.24.1 | 4 / 12 | |
| 1.24.0 | 4 / 12 | |
| 1.23.2 | 4 / 12 | |
| 1.23.1 | 4 / 12 | |
| 1.23.0 | 4 / 12 | |
| 1.22.7 | 4 / 12 | |
| 1.22.6 | 4 / 12 | |
| 1.22.5 | 4 / 12 | |
| 1.22.4 | 4 / 12 | |
| 1.22.3 | 4 / 12 | |
| 1.22.2 | 4 / 12 | |
| 1.22.1 | 4 / 12 | |
| 1.22.0 | 4 / 12 | |
| 1.21.8 | 4 / 12 | |
| 1.21.7 | 4 / 12 | |
| 1.21.6 | 4 / 12 | |
| 1.21.5 | 4 / 12 | |
| 1.21.2 | 4 / 12 | |
| 1.21.1 | 4 / 12 | |
| 1.21.0 | 4 / 12 | |
| 1.20.4 | 4 / 12 | |
| 1.20.3 | 4 / 12 | |
| 1.20.2 | 4 / 12 | |
| 1.20.1 | 4 / 12 | |
| 1.20.0 | 4 / 12 | |
| 1.19.16 | 4 / 11 | |
| 1.19.15 | 4 / 11 | |
| 1.19.14 | 4 / 11 | |
| 1.19.13 | 4 / 11 | |
| 1.19.12 | 4 / 11 | |
| 1.19.11 | 4 / 11 | |
| 1.19.9 | 4 / 11 | |
| 1.19.8 | 4 / 11 | |
| 1.19.7 | 4 / 11 | |
| 1.19.6 | 4 / 11 |
v1.28.5
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.4
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.3
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.