← Home

@solana/codecs

npm Repository Homepage
20
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

solana-devs

Keywords

blockchainsolanaweb3

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern new-deps-added AI (publish-pattern): New dep is @solana/[email protected] from the same monorepo; coordinated version bump, not a suspicious third-party addition. ai
dependencies unvetted-dep:@solana/options AI (dependencies): Sibling package from the same anza-xyz/kit monorepo, same release train. Not a third-party risk. ai
dependencies unvetted-dep:@solana/codecs-core AI (dependencies): Sibling package from the same anza-xyz/kit monorepo, same release train. Not a third-party risk. ai
dependencies unvetted-dep:@solana/codecs-numbers AI (dependencies): Sibling package from the same anza-xyz/kit monorepo, same release train. Not a third-party risk. ai
dependencies unvetted-dep:@solana/codecs-strings AI (dependencies): Sibling package from the same anza-xyz/kit monorepo, same release train. Not a third-party risk. ai
dependencies unvetted-dep:@solana/codecs-data-structures AI (dependencies): Sibling package from the same anza-xyz/kit monorepo, same release train. Not a third-party risk. ai

Versions (showing 20 of 20)

Version Deps Published
7.0.0 6 / 0
6.10.0 6 / 0
6.9.0 6 / 0
6.8.0 5 / 0
6.7.0 5 / 0
6.6.0 5 / 0
6.5.0 5 / 0
6.4.0 5 / 0
6.3.1 5 / 0
6.3.0 5 / 0
6.2.0 5 / 0
6.1.0 5 / 0
6.0.1 5 / 0
6.0.0 5 / 0
5.5.1 5 / 0
5.5.0 5 / 0
5.4.0 5 / 0
5.3.0 5 / 0
5.2.0 5 / 0
5.1.0 5 / 0

v7.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.