← Home

@vercel/gatsby-plugin-vercel-builder

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

matheussmatt.strakavercel-release-botzeit-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Vercel migrated publishing from vercel-release-bot to GitHub Actions CI; SLSA attestation confirms legitimate CI provenance. ai

Versions (showing 51 of 169)

View all versions
Version Deps Published
2.2.30 5 / 6
2.2.29 5 / 6
2.2.28 5 / 6
2.2.27 5 / 6
2.2.26 5 / 6
2.2.25 5 / 6
2.2.24 5 / 6
2.2.23 5 / 6
2.2.22 5 / 6
2.2.21 5 / 6
2.2.20 5 / 6
2.2.19 5 / 6
2.2.18 5 / 6
2.2.17 5 / 6
2.2.16 5 / 6
2.2.15 5 / 6
2.2.14 5 / 6
2.2.13 5 / 6
2.2.12 5 / 6
2.2.11 5 / 6
2.2.10 5 / 6
2.2.9 5 / 6
2.2.8 5 / 6
2.2.7 5 / 6
2.2.6 5 / 6
2.2.5 5 / 6
2.2.4 5 / 6
2.2.3 5 / 6
2.2.2 5 / 6
2.2.1 5 / 6
2.2.0 5 / 7
2.1.21 5 / 8
2.1.20 5 / 8
2.1.19 5 / 8
2.1.18 5 / 8
2.1.16 5 / 8
2.1.15 5 / 8
2.1.14 5 / 8
2.1.13 5 / 8
2.1.12 5 / 8
2.1.11 5 / 8
2.1.10 5 / 8
2.1.9 5 / 8
2.1.8 5 / 8
2.1.7 5 / 8
2.1.6 5 / 8
2.1.5 5 / 8
2.1.4 5 / 8
2.1.2 5 / 8
2.1.1 5 / 8
2.1.0 5 / 8

v2.2.30

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.29

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.28

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.27

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.2.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.