← Home

@vercel/client

npm Repository Homepage

[Join the Vercel Community](https://community.vercel.com/)

100
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures No source commit

Maintainers

matheussmatt.strakavercel-release-botzeit-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Vercel migrated releases to GitHub Actions CI/CD with SLSA attestation; publisher change is expected going forward. ai
provenance slsa-provenance AI (provenance): Vercel publishes via CI/CD with Sigstore attestation; stable pattern for this package. ai
phantom-deps phantom-dep:querystring AI (phantom-deps): querystring is explicitly declared as a runtime dependency in package.json; phantom-dep is a false positive here. ai

Versions (showing 100 of 118)

Version Deps Published
18.1.1 13 / 8
18.1.0 13 / 8
18.0.0 13 / 8
17.6.5 14 / 9
17.6.4 14 / 9
17.6.3 14 / 9
17.6.2 14 / 9
17.6.1 14 / 9
17.6.0 14 / 9
17.5.18 14 / 9
17.5.17 14 / 9
17.5.16 14 / 9
17.5.15 14 / 9
17.5.14 14 / 9
17.5.13 14 / 9
17.5.12 14 / 9
17.5.11 14 / 9
17.5.10 14 / 9
17.5.9 14 / 9
17.5.8 14 / 9
17.5.7 14 / 9
17.5.6 14 / 9
17.5.5 14 / 9
17.5.4 14 / 9
17.5.3 14 / 9
17.5.2 14 / 9
17.5.1 14 / 9
17.5.0 14 / 9
17.4.3 14 / 9
17.4.2 14 / 9
17.4.1 14 / 9
17.4.0 14 / 11
17.3.10 14 / 12
17.3.9 14 / 12
17.3.8 14 / 12
17.3.7 14 / 12
17.3.5 14 / 12
17.3.4 14 / 12
17.3.3 14 / 12
17.3.2 14 / 12
17.3.1 14 / 12
17.3.0 14 / 12
17.2.69 14 / 12
17.2.68 14 / 12
17.2.67 14 / 12
17.2.66 14 / 12
17.2.65 14 / 12
17.2.64 14 / 12
17.2.63 14 / 12
17.2.61 14 / 12
17.2.60 14 / 12
17.2.59 14 / 12
17.2.58 14 / 12
17.2.57 14 / 12
17.2.54 14 / 12
17.2.53 14 / 12
17.2.52 14 / 12
17.2.51 14 / 12
17.2.50 14 / 12
17.2.49 14 / 12
17.2.48 14 / 12
17.2.46 14 / 12
17.2.45 14 / 12
17.2.44 14 / 12
17.2.43 14 / 12
17.2.42 14 / 12
17.2.41 14 / 12
17.2.40 14 / 12
17.2.39 14 / 12
17.2.38 14 / 12
17.2.37 14 / 12
17.2.36 14 / 12
17.2.35 14 / 12
17.2.34 14 / 12
17.2.33 14 / 12
17.2.32 14 / 12
17.2.31 14 / 12
17.2.30 14 / 12
17.2.29 14 / 12
17.2.28 14 / 12
17.2.27 14 / 12
17.2.26 14 / 12
17.2.25 14 / 12
17.2.24 14 / 12
17.2.23 14 / 12
17.2.22 14 / 12
17.2.21 14 / 12
17.2.20 14 / 12
17.2.19 14 / 12
17.2.18 14 / 12
17.2.17 14 / 12
17.2.16 14 / 12
17.2.15 14 / 12
17.2.14 14 / 12
17.2.13 14 / 12
17.2.12 14 / 12
17.2.11 14 / 12
17.2.10 14 / 12
17.2.9 14 / 12
17.2.8 14 / 12
Showing 100 of 118 Next page →

v18.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v18.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v18.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v17.6.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v17.6.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v17.6.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.