← Home

@valbuild/server

npm Repository Homepage

Val - integrated server

51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

freekhtheodorc_blank

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): SLSA provenance attestation present; gitHead absence is superseded by Sigstore attestation for this package. ai
typosquat typosquat.levenshtein:semver AI (typosquat): Scoped monorepo package @valbuild/server; not a typosquat of semver — edit distance match is coincidental. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): chokidar is a declared runtime dep used via config; phantom-dep heuristic fires but it's a legitimate dependency. ai
phantom-deps phantom-dep:minimatch AI (phantom-deps): minimatch is a declared runtime dep; phantom-dep heuristic is a false positive for this package. ai
bogus-package bogus-package AI (bogus-package): Established monorepo package (176 versions, 1063 days); sparse README is typical for internal/server packages. ai

Versions (showing 51 of 93)

View all versions
Version Deps Published
0.97.3 11 / 2
0.97.2 11 / 2
0.97.1 11 / 2
0.97.0 11 / 2
0.96.3 11 / 2
0.96.2 11 / 2
0.96.1 11 / 2
0.96.0 11 / 2
0.95.0 11 / 2
0.94.0 11 / 2
0.93.0 11 / 2
0.92.1 11 / 2
0.92.0 11 / 2
0.91.4 11 / 2
0.91.3 11 / 2
0.91.2 11 / 2
0.91.1 11 / 2
0.91.0 11 / 2
0.90.0 11 / 2
0.89.0 11 / 2
0.88.0 11 / 2
0.87.5 11 / 2
0.87.4 11 / 2
0.87.3 11 / 2
0.87.2 11 / 2
0.87.1 11 / 2
0.87.0 11 / 2
0.86.3 11 / 2
0.86.2 11 / 2
0.86.1 11 / 2
0.86.0 11 / 2
0.85.1 11 / 2
0.85.0 11 / 2
0.84.3 11 / 2
0.84.2 11 / 2
0.84.1 11 / 2
0.84.0 11 / 2
0.83.0 11 / 2
0.82.0 11 / 2
0.81.0 11 / 2
0.80.0 11 / 2
0.79.4 11 / 2
0.79.3 11 / 2
0.79.2 11 / 2
0.79.1 11 / 2
0.79.0 11 / 2
0.78.3 11 / 2
0.78.2 11 / 2
0.78.1 11 / 2
0.78.0 11 / 2
0.77.1 11 / 2

v0.97.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.