@s-hirano-ist/s-scripts
CLI scripts for s-private data operations
51
Versions
AGPL-3.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
s-hirano-ist
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@s-hirano-ist/s-image-processing | AI (dependencies): Same publisher namespace as this package; replaces sharp as an in-house wrapper; consistent with the package's stated function. | ai | |
| provenance | publisher-changed | AI (provenance): Package is published via GitHub Actions with SLSA provenance; automated publisher is the documented release mechanism. | ai | |
| dependencies | unvetted-dep:dprint | AI (dependencies): dprint is a well-known code formatter; legitimate dependency. | ai | |
| dependencies | unvetted-dep:@googleapis/books | AI (dependencies): Official Google APIs client library; legitimate dependency. | ai | |
| dependencies | unvetted-dep:@s-hirano-ist/s-database | AI (dependencies): Same-author monorepo sibling package; consistent naming and SLSA-attested publisher. | ai | |
| dependencies | unvetted-dep:@s-hirano-ist/s-notification | AI (dependencies): Same-author monorepo sibling package; consistent naming and SLSA-attested publisher. | ai | |
| dependencies | unvetted-dep:@s-hirano-ist/s-storage | AI (dependencies): Same-author monorepo sibling package; consistent naming and SLSA-attested publisher. | ai | |
| dependencies | unvetted-dep:@s-hirano-ist/s-core | AI (dependencies): Same-author monorepo sibling package; consistent naming and SLSA-attested publisher. | ai |
Versions (showing 51 of 55)
| Version | Deps | Published |
|---|---|---|
| 1.25.2 | 14 / 4 | |
| 1.25.1 | 14 / 5 | |
| 1.25.0 | 14 / 5 | |
| 1.24.1 | 14 / 5 | |
| 1.24.0 | 14 / 5 | |
| 1.23.5 | 14 / 5 | |
| 1.23.4 | 14 / 5 | |
| 1.23.3 | 14 / 5 | |
| 1.23.2 | 14 / 5 | |
| 1.23.1 | 14 / 5 | |
| 1.23.0 | 14 / 5 | |
| 1.22.1 | 14 / 5 | |
| 1.22.0 | 14 / 5 | |
| 1.21.0 | 11 / 4 | |
| 1.20.1 | 10 / 4 | |
| 1.20.0 | 10 / 4 | |
| 1.19.0 | 10 / 4 | |
| 1.18.7 | 10 / 4 | |
| 1.18.6 | 10 / 4 | |
| 1.18.5 | 10 / 4 | |
| 1.18.4 | 11 / 4 | |
| 1.18.3 | 11 / 5 | |
| 1.18.2 | 11 / 5 | |
| 1.18.1 | 11 / 5 | |
| 1.18.0 | 11 / 6 | |
| 1.17.0 | 11 / 6 | |
| 1.16.3 | 11 / 6 | |
| 1.16.2 | 11 / 6 | |
| 1.16.1 | 11 / 6 | |
| 1.16.0 | 11 / 6 | |
| 1.15.1 | 11 / 6 | |
| 1.15.0 | 11 / 6 | |
| 1.14.0 | 11 / 6 | |
| 1.13.0 | 11 / 6 | |
| 1.12.2 | 9 / 6 | |
| 1.12.1 | 9 / 6 | |
| 1.12.0 | 9 / 6 | |
| 1.11.0 | 9 / 5 | |
| 1.10.0 | 9 / 5 | |
| 1.9.2 | 9 / 5 | |
| 1.9.1 | 9 / 5 | |
| 1.9.0 | 9 / 5 | |
| 1.8.4 | 9 / 5 | |
| 1.8.3 | 9 / 5 | |
| 1.8.2 | 9 / 5 | |
| 1.8.1 | 9 / 5 | |
| 1.8.0 | 9 / 5 | |
| 1.7.1 | 9 / 5 | |
| 1.7.0 | 9 / 5 | |
| 1.6.0 | 9 / 5 | |
| 1.5.2 | 6 / 5 |
v1.25.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.25.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.