← Home

@treeship/verify

npm Repository Homepage

Zero-dependency cryptographic verification for Treeship receipts and certificates. Runs anywhere WASM runs: Node, browser, Vercel Edge, Cloudflare Workers, AWS Lambda.

30
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

amit.shrivastavazerker1

Keywords

treeshipverificationverifyattestationreceiptscertificatecross-verificationwasmedgeserverless

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from manual publish (zerker1) to GitHub Actions CI/CD with SLSA attestation; expected and more secure pattern. ai

Versions (showing 30 of 30)

Version Deps Published
0.21.0 1 / 3
0.20.0 1 / 3
0.19.1 1 / 3
0.19.0 1 / 3
0.18.0 1 / 3
0.17.1 1 / 3
0.17.0 1 / 3
0.16.0 1 / 3
0.15.0 1 / 3
0.14.0 1 / 3
0.13.0 1 / 3
0.12.0 1 / 3
0.11.2 1 / 3
0.11.1 1 / 3
0.11.0 1 / 3
0.10.4 1 / 3
0.10.3 1 / 3
0.10.2 1 / 3
0.10.1 1 / 3
0.10.0 1 / 3
0.9.11 1 / 3
0.9.10 1 / 3
0.9.9 1 / 3
0.9.8 1 / 3
0.9.7 1 / 3
0.9.6 1 / 3
0.9.5 1 / 3
0.9.4 1 / 3
0.9.3 1 / 3
0.9.2 1 / 3

v0.21.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.20.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.19.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.18.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.17.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.17.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.16.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.15.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.