@stryke/unique-id
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed from stormie-bot to GitHub Actions CI/CD with SLSA provenance attestation — this is a legitimate and security-improving transition for the storm-software/stryke project. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Minor cosmetic signals (off-topic README, no keywords) on an established 443-day-old package with 86 versions and 4 approved dependents. Not a security concern. | ai |
Versions (showing 51 of 116)
| Version | Deps | Published |
|---|---|---|
| 0.3.110 | 2 / 1 | |
| 0.3.109 | 2 / 1 | |
| 0.3.108 | 2 / 1 | |
| 0.3.107 | 2 / 1 | |
| 0.3.106 | 2 / 1 | |
| 0.3.105 | 2 / 1 | |
| 0.3.104 | 2 / 1 | |
| 0.3.103 | 2 / 1 | |
| 0.3.102 | 2 / 1 | |
| 0.3.101 | 2 / 1 | |
| 0.3.100 | 2 / 1 | |
| 0.3.99 | 2 / 1 | |
| 0.3.98 | 2 / 1 | |
| 0.3.97 | 2 / 1 | |
| 0.3.96 | 2 / 1 | |
| 0.3.95 | 2 / 1 | |
| 0.3.94 | 2 / 1 | |
| 0.3.93 | 2 / 1 | |
| 0.3.92 | 2 / 1 | |
| 0.3.91 | 2 / 1 | |
| 0.3.90 | 2 / 1 | |
| 0.3.89 | 2 / 1 | |
| 0.3.88 | 2 / 1 | |
| 0.3.87 | 4 / 1 | |
| 0.3.86 | 4 / 1 | |
| 0.3.85 | 4 / 1 | |
| 0.3.84 | 4 / 1 | |
| 0.3.83 | 0 / 1 | |
| 0.3.82 | 0 / 1 | |
| 0.3.81 | 0 / 1 | |
| 0.3.80 | 0 / 1 | |
| 0.3.79 | 0 / 1 | |
| 0.3.78 | 0 / 1 | |
| 0.3.77 | 0 / 1 | |
| 0.3.76 | 0 / 1 | |
| 0.3.75 | 0 / 1 | |
| 0.3.74 | 0 / 1 | |
| 0.3.73 | 0 / 1 | |
| 0.3.72 | 0 / 1 | |
| 0.3.71 | 0 / 1 | |
| 0.3.70 | 0 / 1 | |
| 0.3.69 | 0 / 1 | |
| 0.3.68 | 0 / 1 | |
| 0.3.67 | 0 / 1 | |
| 0.3.66 | 0 / 1 | |
| 0.3.65 | 0 / 1 | |
| 0.3.64 | 0 / 1 | |
| 0.3.61 | 0 / 1 | |
| 0.3.60 | 0 / 1 | |
| 0.3.59 | 0 / 1 | |
| 0.3.58 | 0 / 1 |
v0.3.110
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.109
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.108
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.107
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.106
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.105
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.3.104
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.