← Home

@wisemen/address

25
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

wouter.appwisekobe-kwanten-wisemenjorenvandeweyerrobbe95fullmetaljsmaartensijmkenswisemen-sysopspeethadaanpersoonsjonasvannieuwenhuijsenyuhanghujonasbeckerssebastiaanvanspauwenjeroen-vc

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI/CD publishing with SLSA attestation; legitimate for this org's monorepo. ai
provenance missing-githead AI (provenance): SLSA provenance attestation provides stronger supply chain integrity than gitHead field; absence is expected with this CI setup. ai

Versions (showing 25 of 25)

Version Deps Published
0.4.7 0 / 8
0.4.6 2 / 8
0.4.5 2 / 8
0.4.4 2 / 8
0.4.3 2 / 8
0.4.2 2 / 5
0.4.1 2 / 5
0.4.0 2 / 5
0.3.7 2 / 5
0.3.6 2 / 5
0.3.5 2 / 5
0.3.4 2 / 5
0.3.3 2 / 5
0.3.2 2 / 5
0.3.0 0 / 7
0.2.9 0 / 7
0.2.8 0 / 6
0.2.7 0 / 6
0.2.6 0 / 6
0.2.5 0 / 6
0.2.4 0 / 6
0.2.3 0 / 6
0.2.2 0 / 6
0.2.1 0 / 6
0.1.1 0 / 6

v0.4.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.