← Home

@ttoss/http-server

npm Repository
35
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

techtriangulostecnologiapedroarantes

Keywords

koaserver

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): pedro-arantes and pedroarantes are the same person (Pedro Arantes); consistent repo/org and SLSA provenance confirm legitimate rename. ai
maintainer-change maintainer-added AI (maintainer-change): New npm username is same maintainer; stable for this package. ai
maintainer-change maintainer-removed AI (maintainer-change): Old username removed as part of account rename; not a takeover signal. ai
phantom-deps phantom-dep:multer AI (phantom-deps): multer is a peer/transitive dep of @koa/multer; not directly imported but legitimately declared. ai

Versions (showing 35 of 35)

Version Deps Published
0.7.1 7 / 8
0.7.0 7 / 8
0.6.1 7 / 8
0.6.0 7 / 8
0.5.13 7 / 8
0.5.12 7 / 8
0.5.11 7 / 8
0.5.10 7 / 8
0.5.9 7 / 8
0.5.8 7 / 9
0.5.7 7 / 9
0.5.6 7 / 9
0.5.5 7 / 9
0.4.1 7 / 9
0.4.0 7 / 9
0.3.2 6 / 8
0.3.1 6 / 8
0.3.0 6 / 8
0.1.16 6 / 8
0.1.15 6 / 8
0.1.14 6 / 8
0.1.13 6 / 8
0.1.12 6 / 8
0.1.11 6 / 8
0.1.10 6 / 8
0.1.9 6 / 8
0.1.8 6 / 8
0.1.7 6 / 8
0.1.6 6 / 8
0.1.5 6 / 8
0.1.4 6 / 8
0.1.3 6 / 8
0.1.2 6 / 8
0.1.1 6 / 8
0.1.0 6 / 8

v0.1.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.