@tinacms/graphql
[Tina](https://tina.io) is a headless content management system with support for Markdown, MDX, JSON, YAML, and more. This package contains the logic required to turn a collection of folders and files into a database that can be queried using [GraphQL](ht
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| license | uncommon-license:SEE LICENSE IN LICENSE | AI (license): Custom license file pattern; stable for this package. | ai | |
| dependencies | unvetted-dep:many-level | AI (dependencies): Standard LevelDB abstraction dep; expected for this package's data layer. | ai | |
| dependencies | unvetted-dep:@tinacms/mdx | AI (dependencies): First-party sibling package in the TinaCMS monorepo; stable dependency. | ai | |
| dependencies | unvetted-dep:@tinacms/schema-tools | AI (dependencies): First-party sibling package in the TinaCMS monorepo; stable dependency. | ai |
Versions (showing 16 of 16)
| Version | Deps | Published |
|---|---|---|
| 2.4.9 | 20 / 20 | |
| 2.4.8 | 20 / 20 | |
| 2.4.7 | 20 / 20 | |
| 2.4.6 | 20 / 20 | |
| 2.4.5 | 20 / 20 | |
| 2.4.4 | 20 / 20 | |
| 2.4.3 | 20 / 20 | |
| 2.4.2 | 20 / 20 | |
| 2.4.1 | 20 / 20 | |
| 2.4.0 | 20 / 20 | |
| 2.3.1 | 20 / 20 | |
| 2.3.0 | 20 / 20 | |
| 2.2.5 | 20 / 20 | |
| 2.2.4 | 20 / 20 | |
| 2.2.3 | 20 / 20 | |
| 2.2.2 | 20 / 20 |
v2.4.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.4.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.