← Home

@shoplflow/shopl-assets

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

jason-jeongdaisy.kimshoplworks-devkim-777kevin.jeon

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions publishing backed by SLSA Sigstore attestation; consistent with org-level CI automation. ai

Versions (showing 51 of 64)

View all versions
Version Deps Published
0.12.49 0 / 15
0.12.48 0 / 15
0.12.47 0 / 15
0.12.46 0 / 15
0.12.45 0 / 15
0.12.44 0 / 15
0.12.43 0 / 15
0.12.42 0 / 15
0.12.41 0 / 15
0.12.40 0 / 15
0.12.39 0 / 15
0.12.38 0 / 15
0.12.37 0 / 15
0.12.36 0 / 15
0.12.35 0 / 15
0.12.34 0 / 15
0.12.33 0 / 15
0.12.32 0 / 15
0.12.31 0 / 15
0.12.27 0 / 15
0.12.26 0 / 15
0.12.25 0 / 15
0.12.24 0 / 15
0.12.23 0 / 15
0.12.22 0 / 15
0.12.21 0 / 15
0.12.20 0 / 15
0.12.19 0 / 15
0.12.18 0 / 15
0.12.17 0 / 15
0.12.16 0 / 15
0.12.15 0 / 15
0.12.14 0 / 15
0.12.13 0 / 15
0.12.12 0 / 15
0.12.11 0 / 15
0.12.10 0 / 15
0.12.9 0 / 15
0.12.8 0 / 15
0.12.7 0 / 15
0.12.6 0 / 15
0.12.5 0 / 15
0.12.4 0 / 15
0.12.3 0 / 15
0.12.2 0 / 15
0.12.1 0 / 15
0.12.0 0 / 15
0.11.5 0 / 15
0.11.4 0 / 15
0.11.3 0 / 15
0.11.2 0 / 15

v0.12.49

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.12.48

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.12.47

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.12.46

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.12.45

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.12.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.12.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.11.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.11.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.11.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.11.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.