← Home

@sap-ux/backend-proxy-middleware-cf

npm Repository

UI5 server middleware using @sap/approuter for CF-style destinations and xs-app.json

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tqueckkranthie.sapsap_extncrepossap-ospo-admindevinea

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): SAP monorepo migrated to GitHub Actions CI/CD publishing; SLSA attestation confirms official repo origin. ai
maintainer-change maintainer-added AI (maintainer-change): sap-ospo-admin is SAP's OSS admin account; consistent with org-level governance change. ai
dependencies unvetted-dep:@sap-ux/adp-tooling AI (dependencies): Sibling SAP open-ux-tools package from the same org/repo; stable false positive for this package. ai
provenance no-provenance AI (provenance): SAP open-ux-tools monorepo does not publish with Sigstore provenance; stable pattern across all versions. ai

Versions (showing 51 of 159)

View all versions
Version Deps Published
0.3.39 9 / 5
0.3.37 9 / 5
0.3.36 9 / 5
0.3.35 9 / 5
0.3.34 9 / 5
0.3.33 9 / 5
0.3.32 9 / 5
0.3.31 9 / 5
0.3.30 9 / 5
0.3.29 9 / 5
0.3.28 9 / 5
0.3.27 9 / 5
0.3.26 9 / 5
0.3.25 9 / 5
0.3.24 9 / 5
0.3.23 9 / 5
0.3.22 9 / 5
0.3.21 9 / 5
0.3.20 9 / 5
0.3.19 9 / 5
0.3.18 9 / 5
0.3.17 9 / 5
0.3.16 9 / 5
0.3.15 9 / 5
0.3.14 9 / 5
0.3.13 9 / 5
0.3.12 9 / 5
0.3.11 9 / 5
0.3.10 9 / 5
0.3.9 9 / 5
0.3.8 9 / 5
0.3.7 9 / 5
0.3.6 9 / 5
0.3.4 9 / 5
0.3.3 9 / 5
0.3.1 9 / 5
0.3.0 9 / 5
0.2.11 9 / 4
0.2.10 9 / 4
0.2.9 9 / 4
0.2.7 9 / 4
0.2.6 9 / 4
0.2.5 9 / 4
0.2.3 9 / 4
0.2.2 9 / 4
0.2.1 9 / 4
0.1.22 9 / 4
0.1.21 9 / 4
0.1.20 9 / 4
0.1.19 9 / 4
0.1.17 9 / 4

v0.3.39

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.37

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.36

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.35

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.34

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.33

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.32

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.31

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.30

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.29

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.28

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.27

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.