← Home

@shgysk8zer0/polyfills

npm Repository Homepage
18
Versions
—
License
Yes
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

shgysk8zer0

Keywords

polyfillsshims

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
install-scripts install-script:postinstall AI (install-scripts): Conditional build step only runs if a dev asset file exists; harmless for end-users installing the package. ai
dependencies unvetted-dep:@aegisjsproject/sanitizer AI (dependencies): Part of the same author's ecosystem; legitimate polyfill dependency. ai
dependencies unvetted-dep:@aegisjsproject/trusted-types AI (dependencies): Part of the same author's ecosystem; legitimate polyfill dependency. ai

Versions (showing 18 of 18)

Version Deps Published
0.8.6 2 / 9
0.8.5 2 / 9
0.8.4 2 / 9
0.8.3 2 / 9
0.8.2 2 / 9
0.8.1 2 / 9
0.8.0 2 / 9
0.6.3 2 / 9
0.5.5 2 / 9
0.5.2 2 / 9
0.5.1 2 / 9
0.5.0 2 / 9
0.4.13 2 / 8
0.4.12 2 / 8
0.3.14 3 / 4
0.3.13 3 / 4
0.3.12 3 / 4
0.3.11 2 / 4

v0.3.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v0.3.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v0.3.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v0.3.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.