← Home

@sanity/visual-editing

npm Repository Homepage
32
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sanity-svc.npmsanity-io

Keywords

overlayspresentationpreviewsanity.iovisual-editing

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:get-random-values-esm AI (dependencies): Legitimate crypto polyfill for ESM environments; stable use in this package. ai
provenance publisher-changed AI (provenance): Transition from service account to GitHub Actions CI/CD with SLSA provenance; legitimate for Sanity org. ai
maintainer-change maintainer-removed AI (maintainer-change): Org-wide npm maintainer cleanup; package still published by Sanity's CI pipeline. ai
dependencies unvetted-dep:@sanity/visual-editing-csm AI (dependencies): First-party @sanity scoped package, part of the same visual-editing monorepo; stable false positive for this package. ai

Versions (showing 32 of 32)

Version Deps Published
5.7.3 15 / 40
5.7.2 15 / 40
5.7.1 15 / 40
5.7.0 15 / 40
5.6.0 15 / 40
5.5.1 15 / 40
5.5.0 15 / 40
5.4.5 13 / 38
5.4.4 13 / 37
5.4.3 13 / 37
5.4.2 13 / 37
5.4.1 13 / 37
5.4.0 13 / 36
5.3.6 13 / 36
5.3.4 13 / 36
5.3.3 13 / 36
5.3.2 13 / 36
5.3.1 13 / 36
5.3.0 13 / 36
5.2.1 12 / 36
5.2.0 12 / 36
5.1.2 12 / 36
5.1.1 12 / 36
5.1.0 12 / 36
5.0.4 12 / 36
5.0.3 12 / 36
5.0.2 12 / 35
5.0.1 12 / 35
5.0.0 12 / 35
4.0.3 14 / 36
4.0.2 15 / 36
4.0.1 15 / 36

v5.7.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.7.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.7.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.7.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.5.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.4.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.