← Home

@scalar/oas-utils

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

cameronrohanimarclavescalar_geoffhwkrhanspagelamritkbgrcsscalar-machine

Keywords

oasfetchingspecificationyaml

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata url-dep:zod-to-ts AI (npm-metadata): Dev-only URL dependency to a build fork; no runtime impact. ai
phantom-deps phantom-dep:@hyperjump/json-schema AI (phantom-deps): Used via config files, not a direct import; stable false positive. ai
dependencies unvetted-dep:@scalar/themes AI (dependencies): First-party @scalar org dependency; consistent with the monorepo pattern across all Scalar packages. ai
phantom-deps phantom-dep:type-fest AI (phantom-deps): type-fest is explicitly declared in dependencies; phantom-dep is a false positive for this package. ai

Versions (showing 100 of 248)

Version Deps Published
0.19.8 7 / 4
0.19.7 7 / 4
0.19.6 7 / 4
0.19.5 7 / 4
0.19.4 7 / 4
0.19.3 7 / 4
0.19.2 7 / 4
0.19.1 7 / 4
0.19.0 7 / 4
0.18.5 7 / 4
0.18.4 7 / 4
0.18.3 7 / 4
0.18.2 7 / 4
0.18.1 7 / 4
0.18.0 7 / 4
0.17.3 7 / 4
0.17.2 7 / 4
0.17.1 7 / 4
0.17.0 7 / 4
0.15.3 7 / 4
0.15.2 7 / 4
0.15.1 7 / 4
0.15.0 8 / 4
0.14.0 8 / 4
0.13.4 8 / 4
0.13.3 8 / 4
0.13.2 8 / 4
0.13.1 8 / 4
0.13.0 8 / 4
0.12.0 8 / 4
0.11.1 14 / 6
0.11.0 14 / 6
0.10.16 14 / 6
0.10.15 14 / 6
0.10.14 14 / 6
0.10.13 14 / 6
0.10.12 14 / 6
0.10.11 13 / 7
0.10.10 13 / 7
0.10.9 13 / 7
0.10.8 13 / 8
0.10.7 13 / 8
0.10.6 13 / 8
0.10.5 13 / 8
0.10.4 13 / 8
0.10.3 13 / 8
0.10.2 13 / 8
0.10.1 13 / 8
0.10.0 13 / 8
0.9.0 13 / 8
0.8.3 13 / 8
0.8.2 13 / 8
0.8.1 13 / 8
0.8.0 13 / 8
0.6.48 13 / 8
0.6.47 13 / 8
0.6.46 12 / 8
0.6.45 12 / 8
0.6.42 12 / 7
0.6.40 12 / 7
0.6.39 11 / 7
0.6.38 11 / 7
0.6.37 11 / 7
0.6.36 11 / 7
0.6.35 11 / 7
0.6.34 11 / 7
0.6.33 11 / 7
0.6.32 11 / 7
0.6.31 11 / 7
0.6.30 11 / 7
0.6.29 11 / 7
0.6.28 11 / 7
0.6.27 11 / 7
0.6.26 11 / 7
0.6.25 11 / 7
0.6.24 11 / 7
0.6.23 11 / 7
0.6.22 11 / 7
0.6.21 11 / 7
0.6.20 11 / 7
0.6.19 11 / 7
0.6.17 11 / 7
0.6.16 11 / 7
0.6.15 11 / 7
0.6.14 11 / 7
0.6.13 11 / 7
0.6.12 11 / 7
0.6.11 11 / 7
0.6.8 11 / 7
0.6.7 11 / 7
0.6.6 11 / 7
0.6.5 11 / 7
0.6.4 11 / 7
0.4.4 13 / 8
0.4.3 13 / 8
0.4.2 12 / 8
0.4.1 12 / 8
0.4.0 12 / 8
0.3.2 12 / 8
0.3.1 12 / 8
Showing 100 of 248 Next page →

v0.19.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.3.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.