← Home

@siteimprove/alfa-painting-order

npm Repository Homepage
16
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

ahinpmsi-npm

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
bogus-package bogus-package AI (bogus-package): Siteimprove alfa monorepo packages consistently lack keywords/verbose READMEs; not a spam signal. ai
dependencies unvetted-dep:@siteimprove/alfa-css AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-dom AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-map AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-hash AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-json AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-array AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-cache AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-slice AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-style AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-device AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-option AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-iterable AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-sequence AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-predicate AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-selective AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-comparable AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai
dependencies unvetted-dep:@siteimprove/alfa-refinement AI (dependencies): Sibling monorepo package from same publisher; stable false positive. ai

Versions (showing 16 of 16)

Version Deps Published
0.119.0 18 / 1
0.118.0 18 / 1
0.117.0 18 / 1
0.116.0 18 / 1
0.115.1 18 / 1
0.114.3 18 / 1
0.113.0 18 / 1
0.103.3 18 / 1
0.103.2 18 / 1
0.103.1 18 / 1
0.103.0 18 / 1
0.102.0 18 / 1
0.101.0 14 / 1
0.100.1 14 / 1
0.100.0 14 / 1
0.99.0 14 / 1

v0.119.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.118.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.103.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.103.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.103.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.103.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.102.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.101.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.100.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.100.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.99.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.