← Home

@shoplflow/base

npm Repository Homepage
51
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures No source commit

Maintainers

jason-jeongdaisy.kimshoplworks-devkim-777kevin.jeon

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions publisher is confirmed by SLSA provenance attestation; stable CI/CD pattern for this package. ai
dependencies unvetted-dep:@figma/code-connect AI (dependencies): Official Figma tooling package matching the figma:parse/publish scripts added in this version. ai
phantom-deps phantom-dep:@figma/code-connect AI (phantom-deps): @figma/code-connect is used via CLI (npx figma connect) in scripts, not direct import; phantom-dep is a stable false positive here. ai

Versions (showing 51 of 219)

View all versions
Version Deps Published
0.48.10 14 / 39
0.48.9 14 / 39
0.48.8 14 / 39
0.48.7 14 / 39
0.48.6 14 / 39
0.48.5 14 / 39
0.48.4 14 / 39
0.48.3 14 / 39
0.48.2 14 / 39
0.48.1 14 / 39
0.48.0 14 / 39
0.47.1 14 / 39
0.47.0 14 / 39
0.46.37 14 / 39
0.46.36 14 / 39
0.46.35 14 / 39
0.46.34 14 / 39
0.46.33 14 / 39
0.46.32 14 / 39
0.46.31 14 / 39
0.46.30 14 / 39
0.46.29 14 / 39
0.46.28 14 / 39
0.46.27 14 / 39
0.46.26 14 / 39
0.46.25 14 / 39
0.46.24 14 / 39
0.46.22 14 / 39
0.46.20 14 / 39
0.46.18 14 / 39
0.46.17 14 / 39
0.46.16 13 / 28
0.46.15 13 / 28
0.46.14 13 / 28
0.46.13 13 / 28
0.46.12 13 / 29
0.46.11 13 / 29
0.46.10 13 / 29
0.46.9 13 / 29
0.46.8 13 / 29
0.46.7 13 / 29
0.46.6 13 / 29
0.46.5 13 / 29
0.46.4 13 / 29
0.46.3 13 / 29
0.46.2 13 / 29
0.46.1 13 / 29
0.46.0 13 / 29
0.45.17 13 / 41
0.45.16 13 / 41
0.45.15 13 / 41

v0.48.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.