@some-useful-agents/temporal-provider
Temporal workflow provider for some-useful-agents
27
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
gregmeyer
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed from gregmeyer to GitHub Actions, consistent with setting up automated CI/CD publishing. SLSA provenance attestation confirms the build integrity; repo URL still points to gregmeyer's org. | ai | |
| phantom-deps | phantom-dep:@temporalio/activity | AI (phantom-deps): @temporalio/activity is a legitimate Temporal SDK dependency declared in package.json; may be re-exported or used indirectly rather than directly imported. Stable false positive for this package. | ai |
Versions (showing 27 of 27)
| Version | Deps | Published |
|---|---|---|
| 0.25.0 | 5 / 1 | |
| 0.24.0 | 5 / 1 | |
| 0.22.0 | 5 / 1 | |
| 0.21.0 | 5 / 1 | |
| 0.20.0 | 5 / 1 | |
| 0.19.0 | 5 / 1 | |
| 0.18.0 | 5 / 1 | |
| 0.17.0 | 5 / 1 | |
| 0.16.1 | 5 / 1 | |
| 0.16.0 | 5 / 1 | |
| 0.15.0 | 5 / 1 | |
| 0.14.0 | 5 / 1 | |
| 0.12.0 | 5 / 1 | |
| 0.11.0 | 5 / 1 | |
| 0.10.0 | 5 / 1 | |
| 0.9.0 | 5 / 1 | |
| 0.8.0 | 5 / 1 | |
| 0.7.0 | 5 / 1 | |
| 0.6.1 | 5 / 1 | |
| 0.6.0 | 5 / 1 | |
| 0.5.0 | 5 / 1 | |
| 0.4.0 | 5 / 1 | |
| 0.3.2 | 5 / 1 | |
| 0.3.1 | 5 / 1 | |
| 0.3.0 | 5 / 1 | |
| 0.2.0 | 5 / 1 | |
| 0.1.0 | 5 / 1 |
v0.25.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.