@salesforce/telemetry
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | no-provenance | AI (provenance): Salesforce-releases is a known, trusted publisher with 1103 approved packages. Lack of Sigstore provenance is a minor gap, not a security concern for this established package. | ai |
Versions (showing 51 of 122)
| Version | Deps | Published |
|---|---|---|
| 6.8.40 | 7 / 3 | |
| 6.8.39 | 7 / 3 | |
| 6.8.38 | 7 / 3 | |
| 6.8.37 | 7 / 3 | |
| 6.8.36 | 7 / 3 | |
| 6.8.35 | 7 / 3 | |
| 6.8.34 | 7 / 3 | |
| 6.8.33 | 7 / 3 | |
| 6.8.32 | 7 / 3 | |
| 6.8.31 | 7 / 3 | |
| 6.8.30 | 7 / 3 | |
| 6.8.29 | 7 / 3 | |
| 6.8.28 | 7 / 3 | |
| 6.8.27 | 7 / 3 | |
| 6.8.26 | 7 / 3 | |
| 6.8.25 | 7 / 3 | |
| 6.8.24 | 7 / 3 | |
| 6.8.23 | 7 / 3 | |
| 6.8.22 | 7 / 3 | |
| 6.8.21 | 7 / 3 | |
| 6.8.20 | 7 / 3 | |
| 6.8.19 | 7 / 3 | |
| 6.8.18 | 7 / 3 | |
| 6.8.17 | 7 / 3 | |
| 6.8.16 | 7 / 3 | |
| 6.8.15 | 7 / 3 | |
| 6.8.14 | 7 / 3 | |
| 6.8.13 | 7 / 3 | |
| 6.8.12 | 7 / 3 | |
| 6.8.11 | 7 / 3 | |
| 6.8.10 | 7 / 3 | |
| 6.8.9 | 7 / 3 | |
| 6.8.8 | 7 / 3 | |
| 6.8.7 | 7 / 3 | |
| 6.8.6 | 7 / 3 | |
| 6.8.5 | 7 / 3 | |
| 6.8.4 | 7 / 3 | |
| 6.8.3 | 7 / 3 | |
| 6.8.2 | 7 / 3 | |
| 6.8.1 | 7 / 3 | |
| 6.8.0 | 7 / 3 | |
| 6.7.3 | 7 / 3 | |
| 6.7.2 | 7 / 3 | |
| 6.7.1 | 7 / 3 | |
| 6.7.0 | 7 / 3 | |
| 6.6.7 | 7 / 3 | |
| 6.6.6 | 7 / 3 | |
| 6.6.5 | 7 / 3 | |
| 6.6.4 | 7 / 3 | |
| 6.6.3 | 7 / 3 | |
| 6.6.2 | 7 / 3 |
v6.8.40
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.8.39
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.8.38
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.8.37
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.8.36
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.8.35
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.8.34
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v6.8.33
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.