@supabase/supabase-js
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Monorepo migration dropped gitHead; SLSA attestation provides stronger integrity signal. | ai | |
| dependencies | unvetted-dep:@supabase/node-fetch | AI (dependencies): @supabase/node-fetch is Supabase's own maintained fork of node-fetch, an intentional and stable dependency used across the Supabase ecosystem. Not a risk for this package. | ai | |
| dependencies | unvetted-dep:@supabase/realtime-js | AI (dependencies): First-party Supabase monorepo sub-package, always released in lockstep with supabase-js. Not a third-party unvetted dependency. | ai | |
| dependencies | unvetted-dep:@supabase/auth-js | AI (dependencies): First-party Supabase monorepo sub-package, always released in lockstep with supabase-js. Not a third-party unvetted dependency. | ai | |
| dependencies | unvetted-dep:@supabase/postgrest-js | AI (dependencies): First-party Supabase monorepo sub-package, always released in lockstep with supabase-js. Not a third-party unvetted dependency. | ai | |
| dependencies | unvetted-dep:@supabase/functions-js | AI (dependencies): First-party Supabase monorepo sub-package, always released in lockstep with supabase-js. Not a third-party unvetted dependency. | ai | |
| dependencies | unvetted-dep:@supabase/storage-js | AI (dependencies): First-party Supabase monorepo sub-package, always released in lockstep with supabase-js. Not a third-party unvetted dependency. | ai |
Versions (showing 100 of 238)
| Version | Deps | Published |
|---|---|---|
| 2.110.9 | 5 / 16 | |
| 2.110.8 | 5 / 16 | |
| 2.110.7 | 5 / 16 | |
| 2.110.6 | 5 / 16 | |
| 2.110.5 | 5 / 16 | |
| 2.110.4 | 5 / 16 | |
| 2.110.3 | 5 / 16 | |
| 2.110.2 | 5 / 16 | |
| 2.110.1 | 5 / 16 | |
| 2.110.0 | 5 / 16 | |
| 2.109.0 | 5 / 16 | |
| 2.108.2 | 5 / 16 | |
| 2.108.1 | 5 / 16 | |
| 2.108.0 | 5 / 16 | |
| 2.107.0 | 5 / 16 | |
| 2.106.2 | 5 / 16 | |
| 2.106.1 | 5 / 3 | |
| 2.106.0 | 5 / 3 | |
| 2.105.4 | 5 / 2 | |
| 2.105.3 | 5 / 2 | |
| 2.105.2 | 5 / 2 | |
| 2.105.1 | 5 / 2 | |
| 2.105.0 | 5 / 2 | |
| 2.104.1 | 5 / 2 | |
| 2.104.0 | 5 / 2 | |
| 2.103.3 | 5 / 2 | |
| 2.103.2 | 5 / 2 | |
| 2.103.1 | 5 / 2 | |
| 2.103.0 | 5 / 2 | |
| 2.102.1 | 5 / 2 | |
| 2.102.0 | 5 / 2 | |
| 2.101.1 | 5 / 2 | |
| 2.101.0 | 5 / 2 | |
| 2.100.1 | 5 / 2 | |
| 2.100.0 | 5 / 2 | |
| 2.99.3 | 5 / 2 | |
| 2.99.2 | 5 / 2 | |
| 2.99.1 | 5 / 2 | |
| 2.99.0 | 5 / 2 | |
| 2.98.0 | 5 / 2 | |
| 2.97.0 | 5 / 2 | |
| 2.96.0 | 5 / 2 | |
| 2.95.3 | 5 / 2 | |
| 2.95.2 | 5 / 3 | |
| 2.95.1 | 5 / 2 | |
| 2.95.0 | 5 / 2 | |
| 2.94.1 | 5 / 3 | |
| 2.94.0 | 5 / 3 | |
| 2.93.3 | 5 / 3 | |
| 2.93.2 | 5 / 3 | |
| 2.93.1 | 5 / 3 | |
| 2.93.0 | 5 / 3 | |
| 2.92.0 | 5 / 3 | |
| 2.91.2 | 5 / 3 | |
| 2.91.1 | 5 / 3 | |
| 2.91.0 | 5 / 3 | |
| 2.90.1 | 5 / 3 | |
| 2.90.0 | 5 / 3 | |
| 2.89.0 | 5 / 4 | |
| 2.88.0 | 5 / 4 | |
| 2.87.3 | 5 / 7 | |
| 2.87.2 | 5 / 7 | |
| 2.87.1 | 5 / 7 | |
| 2.87.0 | 5 / 7 | |
| 2.86.2 | 5 / 7 | |
| 2.86.1 | 5 / 7 | |
| 2.86.0 | 5 / 7 | |
| 2.85.0 | 5 / 7 | |
| 2.84.0 | 5 / 7 | |
| 2.83.0 | 5 / 7 | |
| 2.82.0 | 5 / 7 | |
| 2.81.1 | 5 / 7 | |
| 2.81.0 | 5 / 7 | |
| 2.80.0 | 5 / 7 | |
| 2.79.0 | 5 / 7 | |
| 2.78.0 | 6 / 7 | |
| 2.77.0 | 6 / 11 | |
| 2.76.1 | 6 / 11 | |
| 2.76.0 | 6 / 11 | |
| 2.75.1 | 6 / 11 | |
| 2.75.0 | 6 / 11 | |
| 2.74.0 | 6 / 11 | |
| 2.58.0 | 6 / 20 | |
| 2.57.4 | 6 / 21 | |
| 2.57.3 | 6 / 21 | |
| 2.57.2 | 6 / 21 | |
| 2.57.1 | 6 / 21 | |
| 2.57.0 | 6 / 21 | |
| 2.56.1 | 6 / 21 | |
| 2.56.0 | 6 / 21 | |
| 2.55.0 | 6 / 21 | |
| 2.54.0 | 6 / 21 | |
| 2.53.1 | 6 / 21 | |
| 2.53.0 | 6 / 21 | |
| 2.52.1 | 6 / 21 | |
| 2.52.0 | 6 / 21 | |
| 2.51.0 | 6 / 21 | |
| 2.50.5 | 6 / 21 | |
| 2.50.4 | 6 / 20 | |
| 2.50.3 | 6 / 20 |
v2.110.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.110.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.109.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.