← Home

@stryke/convert

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

sullivanpjstormie-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed from stormie-bot to GitHub Actions, a standard CI/CD migration. SLSA provenance attestation confirms legitimate automated publishing pipeline for this package. ai
bogus-package bogus-package AI (bogus-package): Low-value signals (off-topic README, no keywords) have no security implications for this established utility package with 24 approved dependents. ai

Versions (showing 51 of 98)

View all versions
Version Deps Published
0.7.29 2 / 2
0.7.28 2 / 2
0.7.27 2 / 2
0.7.26 2 / 2
0.7.25 2 / 2
0.7.24 2 / 2
0.7.23 2 / 2
0.7.22 2 / 2
0.7.21 2 / 2
0.7.20 2 / 2
0.7.19 2 / 2
0.7.18 2 / 2
0.7.17 2 / 2
0.7.16 2 / 2
0.7.15 2 / 2
0.7.14 2 / 2
0.7.13 2 / 2
0.7.12 2 / 2
0.7.11 2 / 2
0.7.10 2 / 2
0.7.9 2 / 2
0.7.8 2 / 2
0.7.7 2 / 2
0.7.6 2 / 2
0.7.5 2 / 2
0.7.4 0 / 2
0.7.3 0 / 2
0.7.2 0 / 2
0.7.1 0 / 2
0.7.0 0 / 2
0.6.58 0 / 2
0.6.57 0 / 2
0.6.56 0 / 2
0.6.55 0 / 2
0.6.54 0 / 2
0.6.53 0 / 2
0.6.52 0 / 2
0.6.51 0 / 2
0.6.50 0 / 2
0.6.49 0 / 2
0.6.46 0 / 2
0.6.45 0 / 2
0.6.44 0 / 2
0.6.43 0 / 2
0.6.42 0 / 2
0.6.41 0 / 2
0.6.40 0 / 2
0.6.38 0 / 2
0.6.37 0 / 2
0.6.36 0 / 2
0.6.35 0 / 2

v0.7.29

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.28

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.27

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.