← Home

@vercel/python

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

matheussmatt.strakavercel-release-botzeit-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Vercel migrated publishing to GitHub Actions CI with SLSA attestation; publisher change is a legitimate infra transition. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy reflects Vercel's release cadence for this sub-package, not account takeover; SLSA attestation confirms CI provenance. ai

Versions (showing 51 of 93)

View all versions
Version Deps Published
6.53.0 1 / 21
6.52.0 1 / 21
6.51.1 1 / 21
6.51.0 1 / 21
6.50.0 1 / 21
6.49.0 1 / 21
6.48.0 1 / 21
6.47.3 1 / 21
6.47.2 1 / 21
6.47.1 1 / 21
6.47.0 1 / 21
6.45.1 1 / 19
6.45.0 1 / 19
6.44.1 1 / 19
6.44.0 1 / 19
6.43.3 1 / 19
6.43.2 1 / 19
6.43.1 1 / 19
6.43.0 1 / 19
6.42.0 1 / 19
6.41.0 1 / 19
6.40.0 1 / 19
6.39.0 1 / 19
6.38.0 1 / 21
6.37.0 1 / 21
6.36.1 1 / 21
6.36.0 1 / 21
6.35.0 1 / 21
6.34.0 1 / 21
6.33.2 1 / 21
6.33.1 1 / 21
6.33.0 1 / 21
6.32.0 1 / 21
6.31.0 1 / 21
6.30.1 1 / 21
6.30.0 1 / 21
6.29.0 1 / 21
6.28.0 1 / 21
6.26.0 1 / 21
6.25.0 1 / 21
6.24.0 1 / 21
6.23.0 1 / 20
6.22.1 1 / 20
6.22.0 1 / 20
6.21.0 1 / 20
6.20.2 1 / 20
6.20.1 1 / 20
6.20.0 1 / 20
6.19.0 1 / 20
6.18.1 1 / 20
6.18.0 1 / 20

v6.53.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.52.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.51.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.51.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.50.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.49.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.48.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.