← Home

@semiont/make-meaning

npm Repository Homepage

Making meaning from resources through context assembly, pattern detection, and relationship reasoning

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

adamaialliance

Keywords

semantic-annotationknowledge-graphcontext-assemblymeaning-makingresource-analysis

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publisher with SLSA attestation is a supply-chain improvement, not a compromise indicator. ai

Versions (showing 51 of 71)

View all versions
Version Deps Published
0.5.22 11 / 7
0.5.21 11 / 7
0.5.20 11 / 7
0.5.19 11 / 7
0.5.18 11 / 7
0.5.17 11 / 7
0.5.16 11 / 7
0.5.15 11 / 7
0.5.14 11 / 7
0.5.13 11 / 7
0.5.12 11 / 7
0.5.11 11 / 7
0.5.10 11 / 7
0.5.9 11 / 7
0.5.8 11 / 7
0.5.7 11 / 7
0.5.6 11 / 7
0.5.5 11 / 6
0.5.4 11 / 4
0.5.3 11 / 4
0.5.2 11 / 3
0.5.1 9 / 4
0.5.0 9 / 4
0.4.22 9 / 4
0.4.21 9 / 3
0.4.20 9 / 3
0.4.19 9 / 3
0.4.18 9 / 3
0.4.17 9 / 3
0.4.16 9 / 3
0.4.15 9 / 3
0.4.14 9 / 3
0.4.13 9 / 3
0.4.12 8 / 3
0.4.11 8 / 3
0.4.10 8 / 3
0.4.9 8 / 3
0.4.7 8 / 3
0.4.6 8 / 3
0.4.5 8 / 3
0.4.4 8 / 3
0.4.3 8 / 3
0.4.2 9 / 4
0.4.1 9 / 4
0.4.0 9 / 4
0.3.8 9 / 4
0.3.7 9 / 4
0.3.6 9 / 4
0.3.5 9 / 4
0.3.4 8 / 4
0.3.3 8 / 4

v0.5.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.