← Home

@scalar/oas-utils

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

cameronrohanimarclavescalar_geoffhwkrhanspagelamritkbgrcsscalar-machine

Keywords

oasfetchingspecificationyaml

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata url-dep:zod-to-ts AI (npm-metadata): Dev-only URL dependency to a build fork; no runtime impact. ai
phantom-deps phantom-dep:@hyperjump/json-schema AI (phantom-deps): Used via config files, not a direct import; stable false positive. ai
dependencies unvetted-dep:@scalar/themes AI (dependencies): First-party @scalar org dependency; consistent with the monorepo pattern across all Scalar packages. ai
phantom-deps phantom-dep:type-fest AI (phantom-deps): type-fest is explicitly declared in dependencies; phantom-dep is a false positive for this package. ai

Versions (showing 51 of 248)

View all versions
Version Deps Published
0.19.8 7 / 4
0.19.7 7 / 4
0.19.6 7 / 4
0.19.5 7 / 4
0.19.4 7 / 4
0.19.3 7 / 4
0.19.2 7 / 4
0.19.1 7 / 4
0.19.0 7 / 4
0.18.5 7 / 4
0.18.4 7 / 4
0.18.3 7 / 4
0.18.2 7 / 4
0.18.1 7 / 4
0.18.0 7 / 4
0.17.3 7 / 4
0.17.2 7 / 4
0.17.1 7 / 4
0.17.0 7 / 4
0.15.3 7 / 4
0.15.2 7 / 4
0.15.1 7 / 4
0.15.0 8 / 4
0.14.0 8 / 4
0.13.4 8 / 4
0.13.3 8 / 4
0.13.2 8 / 4
0.13.1 8 / 4
0.13.0 8 / 4
0.12.0 8 / 4
0.11.1 14 / 6
0.11.0 14 / 6
0.10.16 14 / 6
0.10.15 14 / 6
0.10.14 14 / 6
0.10.13 14 / 6
0.10.12 14 / 6
0.10.11 13 / 7
0.10.10 13 / 7
0.10.9 13 / 7
0.10.8 13 / 8
0.10.7 13 / 8
0.10.6 13 / 8
0.10.5 13 / 8
0.10.4 13 / 8
0.10.3 13 / 8
0.10.2 13 / 8
0.10.1 13 / 8
0.10.0 13 / 8
0.9.0 13 / 8
0.8.3 13 / 8

v0.19.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.