@stryke/cli
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:joi | AI (typosquat): @stryke/cli is a scoped CLI utility package from storm-software/stryke; Levenshtein match to 'joi' is purely coincidental with no impersonation intent. | ai | |
| dependencies | unvetted-dep:@antfu/ni | AI (dependencies): @antfu/ni is a well-known package manager wrapper by Anthony Fu; its use as a dependency in a CLI helper package is legitimate and expected. | ai |
Versions (showing 51 of 98)
| Version | Deps | Published |
|---|---|---|
| 0.13.71 | 12 / 3 | |
| 0.13.70 | 12 / 3 | |
| 0.13.69 | 12 / 3 | |
| 0.13.68 | 12 / 3 | |
| 0.13.67 | 12 / 3 | |
| 0.13.66 | 12 / 3 | |
| 0.13.65 | 12 / 3 | |
| 0.13.64 | 12 / 3 | |
| 0.13.63 | 12 / 3 | |
| 0.13.62 | 12 / 3 | |
| 0.13.61 | 12 / 3 | |
| 0.13.60 | 12 / 3 | |
| 0.13.59 | 12 / 3 | |
| 0.13.58 | 12 / 3 | |
| 0.13.57 | 12 / 3 | |
| 0.13.56 | 12 / 3 | |
| 0.13.55 | 12 / 3 | |
| 0.13.54 | 12 / 3 | |
| 0.13.53 | 12 / 3 | |
| 0.13.52 | 12 / 3 | |
| 0.13.51 | 12 / 3 | |
| 0.13.50 | 12 / 3 | |
| 0.13.49 | 12 / 3 | |
| 0.13.48 | 12 / 3 | |
| 0.13.47 | 12 / 3 | |
| 0.13.46 | 12 / 3 | |
| 0.13.45 | 12 / 3 | |
| 0.13.44 | 7 / 3 | |
| 0.13.43 | 7 / 3 | |
| 0.13.42 | 7 / 3 | |
| 0.13.41 | 7 / 3 | |
| 0.13.40 | 7 / 3 | |
| 0.13.39 | 7 / 3 | |
| 0.13.38 | 7 / 3 | |
| 0.13.37 | 7 / 3 | |
| 0.13.19 | 7 / 3 | |
| 0.13.18 | 7 / 3 | |
| 0.13.17 | 7 / 3 | |
| 0.13.16 | 7 / 3 | |
| 0.13.15 | 7 / 3 | |
| 0.13.14 | 7 / 3 | |
| 0.13.12 | 7 / 3 | |
| 0.13.11 | 7 / 3 | |
| 0.13.10 | 7 / 3 | |
| 0.13.9 | 7 / 3 | |
| 0.13.8 | 7 / 3 | |
| 0.13.7 | 7 / 3 | |
| 0.13.6 | 7 / 3 | |
| 0.13.5 | 7 / 3 | |
| 0.12.19 | 12 / 2 | |
| 0.12.18 | 12 / 2 |
v0.13.71
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.70
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.69
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.68
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.67
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.66
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.65
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.64
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.