@s-hirano-ist/s-search
RAG search library with Qdrant and embedding API client
23
Versions
AGPL-3.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
s-hirano-ist
Keywords
ragsearchqdrantembedding
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher is GitHub Actions with SLSA provenance attestation; automated CI/CD publishing is the intended pattern for this package. | ai |
Versions (showing 23 of 23)
| Version | Deps | Published |
|---|---|---|
| 1.18.13 | 1 / 2 | |
| 1.18.12 | 1 / 2 | |
| 1.18.11 | 1 / 2 | |
| 1.18.10 | 1 / 2 | |
| 1.18.9 | 1 / 2 | |
| 1.18.8 | 1 / 2 | |
| 1.18.7 | 1 / 2 | |
| 1.18.6 | 1 / 2 | |
| 1.18.5 | 1 / 2 | |
| 1.18.4 | 1 / 2 | |
| 1.18.3 | 1 / 2 | |
| 1.18.2 | 1 / 2 | |
| 1.18.1 | 1 / 2 | |
| 1.18.0 | 1 / 2 | |
| 1.17.0 | 1 / 2 | |
| 1.16.3 | 1 / 2 | |
| 1.16.2 | 1 / 2 | |
| 1.16.1 | 1 / 2 | |
| 1.16.0 | 1 / 2 | |
| 1.15.1 | 1 / 2 | |
| 1.15.0 | 1 / 2 | |
| 1.14.0 | 1 / 3 | |
| 1.12.2 | 1 / 3 |
v1.18.13
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.