← Home

@treeship/a2a

npm Repository Homepage

Treeship attestation middleware for A2A (Agent2Agent) servers and clients

32
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

amit.shrivastavazerker1

Keywords

treeshipa2aagent2agentattestationagentsagent-cardtrust

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:koa AI (typosquat): Scoped package @treeship/a2a; name reflects its A2A bridge purpose, not a squat on koa. ai
typosquat typosquat.levenshtein:ajv AI (typosquat): Scoped package @treeship/a2a; name reflects its A2A bridge purpose, not a squat on ajv. ai

Versions (showing 32 of 32)

Version Deps Published
0.20.0 1 / 3
0.19.1 1 / 3
0.19.0 1 / 3
0.18.0 1 / 3
0.17.1 1 / 3
0.17.0 1 / 3
0.16.0 1 / 3
0.15.0 1 / 3
0.14.0 1 / 3
0.13.0 1 / 3
0.12.0 1 / 3
0.11.2 1 / 3
0.11.1 1 / 3
0.11.0 1 / 3
0.10.4 1 / 3
0.10.3 1 / 3
0.10.2 1 / 3
0.10.1 1 / 3
0.10.0 1 / 3
0.9.11 1 / 3
0.9.10 1 / 3
0.9.9 1 / 3
0.9.8 1 / 3
0.9.7 1 / 3
0.9.6 1 / 3
0.9.5 1 / 3
0.9.4 1 / 3
0.9.3 1 / 3
0.9.2 1 / 3
0.9.0 0 / 3
0.8.0 0 / 3
0.7.1 0 / 3

v0.20.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.18.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.17.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.17.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.16.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.15.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.14.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.