← Home

@storm-software/npm-tools

100
Versions
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing is confirmed by SLSA provenance attestation; consistent with org-level automation. ai
bogus-package bogus-package AI (bogus-package): Established monorepo package with SLSA provenance; README signals are monorepo boilerplate artifacts, not spam. ai
phantom-deps phantom-dep:@storm-software/config AI (phantom-deps): Same-org dependency; likely used transitively or in type-only context within this monorepo package. ai

Versions (showing 100 of 295)

Version Deps Published
0.6.227 4 / 2
0.6.226 4 / 2
0.6.225 4 / 2
0.6.224 4 / 2
0.6.223 4 / 2
0.6.222 4 / 2
0.6.219 4 / 2
0.6.217 4 / 2
0.6.216 4 / 2
0.6.210 4 / 2
0.6.209 4 / 2
0.6.208 4 / 2
0.6.207 4 / 2
0.6.204 4 / 2
0.6.203 4 / 2
0.6.202 4 / 2
0.6.201 4 / 2
0.6.200 4 / 2
0.6.199 4 / 2
0.6.198 4 / 2
0.6.197 4 / 2
0.6.196 4 / 2
0.6.195 2 / 2
0.6.194 2 / 2
0.6.193 2 / 2
0.6.192 2 / 2
0.6.191 2 / 2
0.6.190 2 / 2
0.6.189 2 / 2
0.6.188 2 / 2
0.6.187 2 / 2
0.6.186 2 / 2
0.6.184 2 / 2
0.6.183 2 / 2
0.6.182 2 / 2
0.6.181 2 / 2
0.6.179 2 / 2
0.6.178 2 / 2
0.6.177 2 / 2
0.6.176 2 / 2
0.6.175 2 / 2
0.6.174 2 / 2
0.6.173 2 / 2
0.6.172 2 / 2
0.6.171 2 / 2
0.6.170 2 / 2
0.6.169 2 / 2
0.6.168 2 / 2
0.6.167 2 / 2
0.6.166 2 / 2
0.6.165 2 / 2
0.6.164 2 / 2
0.6.163 2 / 2
0.6.162 2 / 2
0.6.161 2 / 2
0.6.160 2 / 2
0.6.159 2 / 2
0.6.158 2 / 2
0.6.157 2 / 2
0.6.156 2 / 2
0.6.155 2 / 2
0.6.154 2 / 2
0.6.153 2 / 2
0.6.152 2 / 2
0.6.151 2 / 2
0.6.150 2 / 2
0.6.149 2 / 2
0.6.148 2 / 2
0.6.147 2 / 2
0.6.146 2 / 2
0.6.145 2 / 2
0.6.144 2 / 2
0.6.143 2 / 2
0.6.142 2 / 2
0.6.141 2 / 2
0.6.140 2 / 2
0.6.139 2 / 2
0.6.138 2 / 2
0.6.137 2 / 2
0.6.136 2 / 2
0.6.135 2 / 2
0.6.134 2 / 2
0.6.133 2 / 2
0.6.132 2 / 2
0.6.131 2 / 2
0.6.130 2 / 2
0.6.128 2 / 2
0.6.127 2 / 2
0.6.126 2 / 2
0.6.125 2 / 2
0.6.124 2 / 2
0.6.123 2 / 2
0.6.122 2 / 2
0.6.119 2 / 2
0.6.118 2 / 2
0.6.117 2 / 2
0.6.116 2 / 2
0.6.115 2 / 2
0.6.114 2 / 2
0.6.113 2 / 2
Showing 100 of 295 Next page →

v0.6.227

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.226

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.225

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.224

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.223

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.222

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.219

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.217

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.216

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.210

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.209

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.208

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.207

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.204

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.203

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.202

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.201

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.200

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.199

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.198

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.197

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.