← Home

@secretlint/quick-start

npm Repository Homepage

Quick Stater CLI for secretlint.

16
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

azu

Keywords

secretlintclinode.js

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-removed AI (maintainer-change): Secretlint uses GitHub Actions CI publishing; bot account rotation is expected and SLSA provenance confirms CI/CD integrity. ai
publish-pattern dormant-publish AI (publish-pattern): SLSA provenance attestation via GitHub Actions CI/CD provides strong supply chain integrity; mitigates account-takeover concern. ai
phantom-deps phantom-dep:@secretlint/secretlint-rule-preset-recommend AI (phantom-deps): Same-org dependency declared in package.json and re-exported as part of quick-start bundle; stable false positive for this package. ai

Versions (showing 16 of 16)

Version Deps Published
13.0.4 2 / 3
13.0.3 2 / 3
13.0.2 2 / 3
13.0.0 2 / 3
12.3.1 2 / 3
12.3.0 2 / 3
12.2.0 2 / 3
12.1.0 2 / 3
12.0.1 2 / 3
12.0.0 2 / 3
11.7.1 2 / 3
11.6.0 2 / 3
11.4.1 2 / 3
11.4.0 2 / 3
11.3.1 2 / 3
11.3.0 2 / 3

v13.0.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v13.0.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v13.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v12.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v12.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v12.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v12.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.