← Home

@vercel/config

A TypeScript SDK for programmatically configuring Vercel projects

41
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

matheussmatt.strakavercel-release-botzeit-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern new-deps-added AI (publish-pattern): @vercel/routing-utils is a first-party Vercel package; addition is expected for this SDK. ai
maintainer-change maintainer-added AI (maintainer-change): Large Vercel org with frequent team rotation; publisher is the trusted vercel-release-bot with SLSA attestation. ai
maintainer-change maintainer-removed AI (maintainer-change): Same rationale — org-level team churn, not indicative of takeover given verified CI publishing. ai
email-domain unclaimed-email:magic.io AI (email-domain): SLSA provenance attestation from vercel-release-bot CI/CD pipeline mitigates identity-hijack risk via email domain. ai
dependencies unvetted-dep:pretty-cache-header AI (dependencies): Vercel-published package with SLSA provenance; dep risk is low and stable for this package. ai
dependencies unvetted-dep:@vercel/routing-utils AI (dependencies): First-party Vercel dependency from the same monorepo; stable false positive for this package. ai

Versions (showing 41 of 41)

Version Deps Published
0.5.4 3 / 4
0.5.3 3 / 4
0.5.2 3 / 4
0.5.1 3 / 4
0.5.0 3 / 4
0.4.0 3 / 4
0.3.0 3 / 4
0.2.1 3 / 5
0.2.0 3 / 5
0.1.1 3 / 5
0.1.0 3 / 5
0.0.41 3 / 5
0.0.40 3 / 5
0.0.39 3 / 5
0.0.38 3 / 5
0.0.37 3 / 5
0.0.36 3 / 5
0.0.35 3 / 5
0.0.33 3 / 5
0.0.32 2 / 5
0.0.31 2 / 5
0.0.30 2 / 5
0.0.29 2 / 5
0.0.28 2 / 5
0.0.27 2 / 5
0.0.26 2 / 5
0.0.25 2 / 5
0.0.24 2 / 5
0.0.23 2 / 9
0.0.22 2 / 9
0.0.21 2 / 9
0.0.20 2 / 8
0.0.19 2 / 8
0.0.18 2 / 8
0.0.17 2 / 8
0.0.16 2 / 8
0.0.14 2 / 8
0.0.13 2 / 8
0.0.12 2 / 8
0.0.10 2 / 8
0.0.9 2 / 8