@tezos-domains/resolver Apache-2.0 43 versions

@tezos-domains/resolver

npm Repository

A library for resolving tezos domains.

43

Versions

Apache-2.0

License

No

Install Scripts

Missing

Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

mbodecekroxin.cernicanecroskillzandrewpsharppanda

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
maintainer-change	maintainer-added	AI (maintainer-change): Stale 2021 change, long-standing on npm, no malicious diff.	ai	2026/07/25
provenance	publisher-changed-stale	AI (provenance): Publisher change is old and stable; not consistent with takeover.	ai	2026/07/25
publish-pattern	dormant-publish	AI (publish-pattern): Dormancy aligns with historical publish cadence, no code change.	ai	2026/07/25

Versions (showing 43 of 43)

Version	Deps	Published
1.34.1	2 / 15	2026-04-27
1.34.0	2 / 15	2026-04-27
1.33.1	2 / 15	2025-10-12
1.33.0	2 / 15	2025-09-13
1.32.0	2 / 15	2025-02-28
1.31.0	2 / 15	2024-12-15
1.30.2	2 / 15	2024-06-16
1.30.1	2 / 15	2024-06-12
1.30.0	2 / 15	2024-06-12
1.29.0	2 / 15	2024-06-04
1.28.0	2 / 15	2024-04-20
1.27.0	2 / 15	2024-02-13
1.26.0	2 / 14	2023-06-21
1.25.1	2 / 14	2023-06-12
1.25.0	2 / 14	2023-05-08
1.24.0	2 / 14	2023-02-07
1.23.0	2 / 14	2022-12-21
1.22.0	2 / 14	2022-11-29
1.21.0	2 / 14	2022-10-09
1.20.0	2 / 14	2022-09-16
1.19.0	2 / 14	2022-08-31
1.18.1	2 / 14	2022-08-18
1.18.0	2 / 14	2022-07-06
1.17.1	2 / 14	2022-06-15
1.17.0	2 / 14	2022-06-14
1.16.0	2 / 14	2022-06-13
1.15.0	2 / 14	2022-06-07
1.14.0	2 / 14	2022-05-31
1.13.1	2 / 14	2022-04-11
1.13.0	2 / 14	2022-04-09
1.12.0	2 / 14	2022-03-02
1.11.0	2 / 14	2022-01-20
1.10.0	2 / 14	2021-12-28
1.9.0	2 / 14	2021-11-11
1.8.0	2 / 14	2021-10-15
1.7.0	2 / 14	2021-07-28
1.6.0	2 / 14	2021-07-14
1.5.0	2 / 14	2021-07-13
1.4.0	2 / 14	2021-06-30
1.3.0	2 / 14	2021-05-17
1.2.0	2 / 14	2021-05-12
1.1.0	2 / 14	2021-04-27
1.0.0	2 / 14	2021-04-20

v1.32.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.31.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.30.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.30.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.30.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.29.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.28.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2024-04-20, unremoved on npm for 826d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2024-04-20. It has since remained available on npm for 826 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.27.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2024-02-13, unremoved on npm for 892d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2024-02-13. It has since remained available on npm for 892 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.26.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2023-06-21, unremoved on npm for 1130d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2023-06-21. It has since remained available on npm for 1130 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.25.1

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2023-06-12, unremoved on npm for 1139d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2023-06-12. It has since remained available on npm for 1139 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.25.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2023-05-08, unremoved on npm for 1174d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2023-05-08. It has since remained available on npm for 1174 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.24.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2023-02-07, unremoved on npm for 1263d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2023-02-07. It has since remained available on npm for 1263 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.23.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-12-21, unremoved on npm for 1311d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-12-21. It has since remained available on npm for 1311 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.22.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-11-29, unremoved on npm for 1333d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-11-29. It has since remained available on npm for 1333 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.21.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-10-09, unremoved on npm for 1384d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-10-09. It has since remained available on npm for 1384 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.20.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-09-16, unremoved on npm for 1407d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-09-16. It has since remained available on npm for 1407 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.19.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-08-31, unremoved on npm for 1423d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-08-31. It has since remained available on npm for 1423 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.18.1

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-08-18, unremoved on npm for 1436d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-08-18. It has since remained available on npm for 1436 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.18.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-07-06, unremoved on npm for 1479d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-07-06. It has since remained available on npm for 1479 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.17.1

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-06-15, unremoved on npm for 1500d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-06-15. It has since remained available on npm for 1500 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.17.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-06-14, unremoved on npm for 1501d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-06-14. It has since remained available on npm for 1501 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.16.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-06-13, unremoved on npm for 1502d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-06-13. It has since remained available on npm for 1502 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.15.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-06-07, unremoved on npm for 1509d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-06-07. It has since remained available on npm for 1509 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.14.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-05-31, unremoved on npm for 1515d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-05-31. It has since remained available on npm for 1515 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.13.1

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-04-11, unremoved on npm for 1566d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-04-11. It has since remained available on npm for 1566 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.13.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-04-09, unremoved on npm for 1567d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-04-09. It has since remained available on npm for 1567 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.12.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-03-02, unremoved on npm for 1605d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-03-02. It has since remained available on npm for 1605 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.11.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2022-01-20, unremoved on npm for 1647d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2022-01-20. It has since remained available on npm for 1647 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.10.0

2 findings

MEDIUM Publisher changed: necroskillz → roxin.cernica (on 2021-12-28, unremoved on npm for 1669d) provenance

This version was published by a different npm account (roxin.cernica) than the most recent previously approved version (necroskillz) on 2021-12-28. It has since remained available on npm for 1669 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.9.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.8.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.7.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.6.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.5.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.4.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.1.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.