← Home

@storm-software/build-tools

100
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Keywords

monorepoopen-systemstormstorm-opsstorm-stackstormstacksullivanpj

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from stormie-bot to GitHub Actions reflects a CI/CD automation migration. SLSA provenance attestation confirms legitimate pipeline publishing for this package. ai
phantom-deps phantom-dep:resolve-from AI (phantom-deps): resolve-from is explicitly declared as a runtime dependency in package.json; the phantom-dep finding is a false positive for this package. ai

Versions (showing 100 of 555)

Version Deps Published
0.158.269 5 / 6
0.158.268 5 / 6
0.158.267 5 / 6
0.158.266 5 / 6
0.158.265 5 / 6
0.158.264 5 / 6
0.158.261 5 / 6
0.158.259 5 / 6
0.158.258 5 / 6
0.158.252 5 / 6
0.158.251 5 / 6
0.158.250 5 / 6
0.158.249 5 / 6
0.158.246 5 / 6
0.158.245 5 / 6
0.158.244 5 / 6
0.158.243 5 / 6
0.158.242 5 / 6
0.158.241 5 / 6
0.158.240 5 / 6
0.158.239 5 / 6
0.158.238 5 / 6
0.158.237 5 / 6
0.158.236 5 / 6
0.158.235 5 / 6
0.158.234 5 / 6
0.158.233 5 / 6
0.158.232 5 / 6
0.158.231 5 / 6
0.158.230 5 / 6
0.158.229 5 / 6
0.158.228 5 / 6
0.158.227 5 / 6
0.158.226 5 / 6
0.158.225 5 / 6
0.158.224 5 / 6
0.158.223 5 / 6
0.158.222 5 / 6
0.158.221 5 / 6
0.158.220 5 / 6
0.158.219 5 / 6
0.158.218 5 / 6
0.158.217 5 / 6
0.158.216 5 / 6
0.158.215 5 / 6
0.158.214 5 / 6
0.158.213 5 / 6
0.158.212 5 / 6
0.158.211 5 / 6
0.158.210 5 / 6
0.158.209 5 / 6
0.158.208 5 / 6
0.158.207 5 / 6
0.158.206 5 / 6
0.158.205 5 / 6
0.158.204 5 / 6
0.158.203 5 / 6
0.158.202 5 / 6
0.158.201 5 / 6
0.158.200 5 / 6
0.158.199 5 / 6
0.158.198 5 / 6
0.158.197 5 / 6
0.158.196 5 / 6
0.158.195 5 / 6
0.158.194 5 / 6
0.158.193 5 / 6
0.158.192 5 / 6
0.158.191 5 / 6
0.158.190 5 / 6
0.158.189 5 / 6
0.158.188 5 / 6
0.158.187 5 / 6
0.158.186 5 / 6
0.158.185 5 / 6
0.158.184 5 / 6
0.158.183 5 / 6
0.158.182 5 / 6
0.158.181 5 / 6
0.158.180 5 / 6
0.158.179 5 / 6
0.158.178 5 / 6
0.158.177 5 / 6
0.158.176 5 / 6
0.158.175 5 / 6
0.158.174 5 / 6
0.158.173 5 / 6
0.158.171 5 / 6
0.158.170 5 / 6
0.158.169 5 / 6
0.158.168 5 / 6
0.158.167 5 / 6
0.158.166 5 / 6
0.158.165 5 / 6
0.158.162 5 / 6
0.158.161 5 / 6
0.158.160 5 / 6
0.158.159 5 / 6
0.158.158 5 / 6
0.158.157 5 / 6
Showing 100 of 555 Next page →

v0.158.269

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.268

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.267

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.266

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.265

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.264

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.261

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.259

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.258

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.252

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.251

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.250

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.249

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.246

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.245

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.244

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.243

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.242

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.241

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.240

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.158.239

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.