← Home

@sanity/sdk

npm Repository Homepage
26
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sanity-svc.npmsanity-io

Keywords

cmscontentcontent operating systemheadlessrealtimesanitysdk

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:shady-links-raw-ip AI (semgrep): 127.0.0.1 appears only in a test file asserting dev-mode detection; not a runtime network call. ai

Versions (showing 26 of 26)

Version Deps Published
2.18.0 17 / 15
2.17.0 17 / 15
2.16.0 17 / 15
2.15.0 17 / 15
2.14.1 17 / 16
2.14.0 17 / 16
2.13.0 17 / 16
2.12.0 17 / 16
2.11.1 17 / 16
2.11.0 17 / 16
2.10.0 17 / 15
2.9.0 18 / 16
2.8.0 16 / 16
2.7.0 16 / 16
2.6.0 15 / 16
2.5.0 15 / 16
2.4.0 15 / 16
2.3.1 15 / 16
2.3.0 15 / 16
2.2.0 14 / 17
2.1.2 14 / 17
2.1.1 14 / 17
2.1.0 13 / 17
2.0.2 12 / 17
2.0.1 12 / 17
2.0.0 12 / 16

v2.18.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.17.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.16.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.