← Home

@valbuild/server

npm Repository Homepage

Val - integrated server

93
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

freekhtheodorc_blank

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): SLSA provenance attestation present; gitHead absence is superseded by Sigstore attestation for this package. ai
typosquat typosquat.levenshtein:semver AI (typosquat): Scoped monorepo package @valbuild/server; not a typosquat of semver — edit distance match is coincidental. ai
phantom-deps phantom-dep:chokidar AI (phantom-deps): chokidar is a declared runtime dep used via config; phantom-dep heuristic fires but it's a legitimate dependency. ai
phantom-deps phantom-dep:minimatch AI (phantom-deps): minimatch is a declared runtime dep; phantom-dep heuristic is a false positive for this package. ai
bogus-package bogus-package AI (bogus-package): Established monorepo package (176 versions, 1063 days); sparse README is typical for internal/server packages. ai

Versions (showing 93 of 93)

Version Deps Published
0.97.3 11 / 2
0.97.2 11 / 2
0.97.1 11 / 2
0.97.0 11 / 2
0.96.3 11 / 2
0.96.2 11 / 2
0.96.1 11 / 2
0.96.0 11 / 2
0.95.0 11 / 2
0.94.0 11 / 2
0.93.0 11 / 2
0.92.1 11 / 2
0.92.0 11 / 2
0.91.4 11 / 2
0.91.3 11 / 2
0.91.2 11 / 2
0.91.1 11 / 2
0.91.0 11 / 2
0.90.0 11 / 2
0.89.0 11 / 2
0.88.0 11 / 2
0.87.5 11 / 2
0.87.4 11 / 2
0.87.3 11 / 2
0.87.2 11 / 2
0.87.1 11 / 2
0.87.0 11 / 2
0.86.3 11 / 2
0.86.2 11 / 2
0.86.1 11 / 2
0.86.0 11 / 2
0.85.1 11 / 2
0.85.0 11 / 2
0.84.3 11 / 2
0.84.2 11 / 2
0.84.1 11 / 2
0.84.0 11 / 2
0.83.0 11 / 2
0.82.0 11 / 2
0.81.0 11 / 2
0.80.0 11 / 2
0.79.4 11 / 2
0.79.3 11 / 2
0.79.2 11 / 2
0.79.1 11 / 2
0.79.0 11 / 2
0.78.3 11 / 2
0.78.2 11 / 2
0.78.1 11 / 2
0.78.0 11 / 2
0.77.1 11 / 2
0.77.0 11 / 2
0.76.1 11 / 2
0.76.0 11 / 2
0.75.5 11 / 2
0.75.4 11 / 2
0.75.3 11 / 2
0.75.2 11 / 2
0.75.1 11 / 2
0.75.0 11 / 2
0.74.0 11 / 2
0.73.2 11 / 2
0.73.1 11 / 2
0.73.0 11 / 2
0.72.4 11 / 2
0.72.3 11 / 2
0.72.2 11 / 2
0.72.1 11 / 2
0.72.0 11 / 2
0.69.3 11 / 2
0.69.1 11 / 2
0.69.0 11 / 2
0.68.2 11 / 2
0.68.1 11 / 2
0.68.0 11 / 2
0.67.1 11 / 2
0.67.0 11 / 2
0.66.0 11 / 2
0.65.2 11 / 2
0.65.0 11 / 2
0.64.0 10 / 2
0.63.5 10 / 1
0.63.2 10 / 1
0.63.1 10 / 1
0.63.0 10 / 1
0.62.6 10 / 1
0.62.5 10 / 1
0.62.4 10 / 1
0.62.3 10 / 1
0.62.2 10 / 1
0.62.1 10 / 1
0.62.0 10 / 1
0.61.0 11 / 3

v0.97.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.75.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.75.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.75.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.75.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.75.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.75.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.74.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.73.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.73.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.73.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.72.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.72.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.72.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.72.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.72.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.69.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.69.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.69.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.68.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.68.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.68.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.67.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.67.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.66.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.65.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.65.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.64.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.63.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.63.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.63.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.63.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.62.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.62.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.62.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.62.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.62.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.62.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.62.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.61.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.