← Home

@vercel/client

npm Repository Homepage

[Join the Vercel Community](https://community.vercel.com/)

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

matheussmatt.strakavercel-release-botzeit-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Vercel migrated releases to GitHub Actions CI/CD with SLSA attestation; publisher change is expected going forward. ai
provenance slsa-provenance AI (provenance): Vercel publishes via CI/CD with Sigstore attestation; stable pattern for this package. ai
phantom-deps phantom-dep:querystring AI (phantom-deps): querystring is explicitly declared as a runtime dependency in package.json; phantom-dep is a false positive here. ai

Versions (showing 51 of 118)

View all versions
Version Deps Published
18.1.1 13 / 8
18.1.0 13 / 8
18.0.0 13 / 8
17.6.5 14 / 9
17.6.4 14 / 9
17.6.3 14 / 9
17.6.2 14 / 9
17.6.1 14 / 9
17.6.0 14 / 9
17.5.18 14 / 9
17.5.17 14 / 9
17.5.16 14 / 9
17.5.15 14 / 9
17.5.14 14 / 9
17.5.13 14 / 9
17.5.12 14 / 9
17.5.11 14 / 9
17.5.10 14 / 9
17.5.9 14 / 9
17.5.8 14 / 9
17.5.7 14 / 9
17.5.6 14 / 9
17.5.5 14 / 9
17.5.4 14 / 9
17.5.3 14 / 9
17.5.2 14 / 9
17.5.1 14 / 9
17.5.0 14 / 9
17.4.3 14 / 9
17.4.2 14 / 9
17.4.1 14 / 9
17.4.0 14 / 11
17.3.10 14 / 12
17.3.9 14 / 12
17.3.8 14 / 12
17.3.7 14 / 12
17.3.5 14 / 12
17.3.4 14 / 12
17.3.3 14 / 12
17.3.2 14 / 12
17.3.1 14 / 12
17.3.0 14 / 12
17.2.69 14 / 12
17.2.68 14 / 12
17.2.67 14 / 12
17.2.66 14 / 12
17.2.65 14 / 12
17.2.64 14 / 12
17.2.63 14 / 12
17.2.61 14 / 12
17.2.60 14 / 12

v18.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v18.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v18.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v17.6.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v17.6.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v17.6.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.