← Home

@vercel/backends

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

matheussmatt.strakavercel-release-botzeit-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
bogus-package bogus-package AI (bogus-package): Vercel monorepo package published by vercel-release-bot; templated naming and sparse metadata are expected patterns. ai
phantom-deps phantom-dep:@vercel/static-config AI (phantom-deps): Framework-scoped Vercel package loaded by convention; stable false positive for this package. ai
phantom-deps phantom-dep:rolldown AI (phantom-deps): Build tool dependency referenced in config files; not directly imported at runtime. Stable pattern for this package. ai
npm-metadata no-description AI (npm-metadata): Internal Vercel monorepo package; missing description is a stable pattern, not a malware signal. ai
provenance publisher-changed AI (provenance): Vercel migrated publishing to GitHub Actions CI; SLSA attestation confirms legitimate pipeline origin. ai
provenance slsa-provenance AI (provenance): Vercel publishes via GitHub Actions CI with SLSA attestation; this is the expected pattern for this org. ai
phantom-deps phantom-dep:fs-extra AI (phantom-deps): Build tool referenced in config; stable pattern for this package. ai
phantom-deps phantom-dep:srvx AI (phantom-deps): Build tool referenced in config; stable pattern for this package. ai
phantom-deps phantom-dep:tsx AI (phantom-deps): Build tool referenced in config; stable pattern for this package. ai

Versions (showing 51 of 97)

View all versions
Version Deps Published
0.8.26 14 / 8
0.8.25 14 / 8
0.8.24 14 / 8
0.8.23 14 / 8
0.8.22 14 / 8
0.8.21 14 / 8
0.8.20 12 / 8
0.8.19 12 / 8
0.8.18 12 / 8
0.8.17 12 / 8
0.8.16 12 / 8
0.8.15 12 / 8
0.8.14 12 / 8
0.8.13 12 / 8
0.8.12 12 / 8
0.8.11 12 / 8
0.8.10 12 / 8
0.8.9 12 / 8
0.8.8 12 / 8
0.8.7 12 / 8
0.8.6 12 / 8
0.8.5 12 / 8
0.8.4 12 / 8
0.8.3 12 / 8
0.8.2 12 / 8
0.8.1 12 / 8
0.8.0 12 / 8
0.7.2 11 / 8
0.7.1 11 / 8
0.7.0 11 / 8
0.6.0 11 / 8
0.5.0 11 / 8
0.4.1 13 / 8
0.4.0 13 / 8
0.3.0 13 / 10
0.2.0 13 / 11
0.1.2 13 / 11
0.1.1 13 / 11
0.1.0 13 / 11
0.0.63 11 / 10
0.0.62 11 / 10
0.0.61 11 / 10
0.0.60 11 / 10
0.0.59 11 / 10
0.0.58 11 / 10
0.0.57 11 / 10
0.0.56 11 / 10
0.0.55 11 / 10
0.0.54 11 / 10
0.0.53 11 / 10
0.0.52 11 / 10

v0.8.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.