@sap-ux/project-input-validator
Library to validate Fiori project input formats
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): SAP/open-ux-tools publishes via GitHub Actions CI/CD with SLSA attestation; this is the expected publisher for this package going forward. | ai | |
| provenance | no-provenance | AI (provenance): SAP open-ux-tools monorepo does not publish with Sigstore provenance; stable false positive for this package family. | ai |
Versions (showing 51 of 117)
| Version | Deps | Published |
|---|---|---|
| 1.0.13 | 3 / 3 | |
| 1.0.12 | 3 / 3 | |
| 1.0.11 | 3 / 3 | |
| 1.0.10 | 3 / 3 | |
| 1.0.9 | 3 / 3 | |
| 1.0.8 | 3 / 3 | |
| 1.0.7 | 3 / 3 | |
| 1.0.6 | 3 / 3 | |
| 1.0.5 | 3 / 3 | |
| 1.0.4 | 3 / 3 | |
| 1.0.2 | 3 / 3 | |
| 1.0.1 | 3 / 3 | |
| 1.0.0 | 3 / 3 | |
| 0.7.2 | 3 / 2 | |
| 0.7.1 | 3 / 2 | |
| 0.7.0 | 3 / 2 | |
| 0.6.83 | 3 / 2 | |
| 0.6.82 | 3 / 2 | |
| 0.6.81 | 3 / 2 | |
| 0.6.80 | 3 / 2 | |
| 0.6.79 | 3 / 2 | |
| 0.6.78 | 3 / 2 | |
| 0.6.77 | 3 / 2 | |
| 0.6.76 | 3 / 2 | |
| 0.6.75 | 3 / 2 | |
| 0.6.74 | 3 / 2 | |
| 0.6.73 | 3 / 2 | |
| 0.6.72 | 3 / 2 | |
| 0.6.71 | 3 / 2 | |
| 0.6.70 | 3 / 2 | |
| 0.6.69 | 3 / 2 | |
| 0.6.68 | 3 / 2 | |
| 0.6.67 | 3 / 2 | |
| 0.6.66 | 3 / 2 | |
| 0.6.65 | 3 / 2 | |
| 0.6.64 | 3 / 2 | |
| 0.6.63 | 3 / 2 | |
| 0.6.62 | 3 / 2 | |
| 0.6.60 | 3 / 2 | |
| 0.6.59 | 3 / 2 | |
| 0.6.58 | 3 / 2 | |
| 0.6.57 | 3 / 2 | |
| 0.6.56 | 3 / 2 | |
| 0.6.55 | 3 / 2 | |
| 0.6.54 | 3 / 2 | |
| 0.6.53 | 3 / 2 | |
| 0.6.52 | 3 / 2 | |
| 0.6.51 | 3 / 2 | |
| 0.6.50 | 3 / 2 | |
| 0.6.49 | 3 / 2 | |
| 0.6.48 | 3 / 2 |
v1.0.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.