← Home

@walkeros/collector

Unified platform-agnostic collector for walkerOS

42
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

alexanderkirtzel

Keywords

walkerOSanalyticstrackingdata collectionmeasurementdata privacyprivacy friendlycollectorevent processing

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): Established monorepo package with 81 versions; missing gitHead is a CI environment change, not a security signal here. ai
publish-pattern new-deps-added AI (publish-pattern): Added dep is a first-party sibling (@walkeros/core) from the same walkerOS monorepo; not a third-party supply-chain risk. ai
dependencies unvetted-dep:@walkeros/core AI (dependencies): Sibling package in the walkerOS monorepo; expected internal dependency across all versions. ai
provenance publisher-changed AI (provenance): Package migrated to GitHub Actions CI/CD publishing with SLSA provenance; this is the expected publisher going forward. ai

Versions (showing 42 of 42)

Version Deps Published
4.3.2 1 / 1
4.3.1 1 / 1
4.3.0 1 / 1
4.2.1 1 / 1
4.2.0 1 / 1
4.1.2 1 / 1
4.1.1 1 / 1
4.1.0 1 / 1
4.0.2 1 / 1
4.0.1 1 / 1
4.0.0 1 / 1
3.4.2 1 / 1
3.4.1 1 / 1
3.4.0 1 / 1
3.3.1 1 / 1
3.3.0 1 / 1
3.2.0 1 / 1
3.1.1 1 / 1
3.1.0 1 / 1
3.0.2 1 / 1
3.0.1 1 / 1
3.0.0 1 / 1
2.1.1 1 / 1
2.1.0 1 / 1
2.0.1 1 / 1
2.0.0 0 / 1
1.2.0 1 / 0
1.1.3 1 / 0
1.1.2 1 / 0
1.1.1 1 / 0
1.1.0 1 / 0
1.0.1 1 / 0
1.0.0 1 / 0
0.9.0 1 / 0
0.7.0 1 / 0
0.6.0 1 / 0
0.5.0 1 / 0
0.4.2 1 / 0
0.4.1 1 / 0
0.4.0 1 / 0
0.3.1 1 / 0
0.3.0 1 / 0

v4.3.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.3.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.