← Home

@wundergraph/cosmo-connect

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

gausiegmasgraspepolsuvijsuryadavidwgthisisnithinwilson.wundergraph

Keywords

wundergraphconnectclientwundergraph-cosmo

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff encoded-string-file:dist/notifications/events_pb.js AI (source-diff): protoc-gen-es base64 fileDescriptor; benign generated code. ai
source-diff encoded-string-file:dist/node/v1/node_pb.js AI (source-diff): protoc-gen-es base64 fileDescriptor; benign generated code. ai
source-diff encoded-string-file:dist/platform/v1/platform_pb.js AI (source-diff): protoc-gen-es base64 fileDescriptor; benign generated code. ai
source-diff encoded-string-file:dist/common/common_pb.js AI (source-diff): protoc-gen-es base64 fileDescriptor, not a payload; stable for generated pb.js files. ai
source-diff encoded-string-file:dist/graphqlmetrics/v1/graphqlmetrics_pb.js AI (source-diff): protoc-gen-es base64 fileDescriptor; benign generated code. ai
provenance publisher-changed AI (provenance): Migration from manual publish to GitHub Actions CI/CD; provenance attested via SLSA. ai
phantom-deps phantom-dep:@connectrpc/connect-query AI (phantom-deps): Declared runtime dep used in generated Connect client code; not directly imported in source but legitimately required. ai

Versions (showing 100 of 192)

Version Deps Published
0.155.2 2 / 2
0.155.1 2 / 2
0.155.0 2 / 2
0.154.0 2 / 2
0.153.3 2 / 2
0.151.0 2 / 2
0.150.0 2 / 2
0.149.0 2 / 2
0.148.0 2 / 2
0.146.0 2 / 2
0.145.0 2 / 2
0.144.0 2 / 2
0.143.0 2 / 2
0.142.1 2 / 2
0.142.0 2 / 2
0.141.0 2 / 2
0.140.0 2 / 2
0.139.0 2 / 2
0.138.0 2 / 2
0.137.0 2 / 2
0.136.0 2 / 2
0.135.0 2 / 2
0.134.0 2 / 2
0.133.0 2 / 2
0.132.0 2 / 2
0.131.0 2 / 2
0.130.0 2 / 2
0.129.0 2 / 2
0.128.0 2 / 2
0.127.3 2 / 2
0.127.2 2 / 2
0.127.1 2 / 2
0.127.0 2 / 2
0.126.0 2 / 2
0.125.0 2 / 2
0.124.0 2 / 2
0.123.0 2 / 2
0.122.0 2 / 2
0.121.0 2 / 2
0.120.0 2 / 2
0.119.1 2 / 2
0.119.0 2 / 2
0.118.0 2 / 2
0.117.0 2 / 2
0.116.0 2 / 2
0.115.2 2 / 2
0.115.1 2 / 2
0.115.0 2 / 2
0.114.0 2 / 2
0.113.0 2 / 2
0.112.0 2 / 2
0.111.0 2 / 2
0.110.0 2 / 2
0.109.0 2 / 2
0.108.0 2 / 2
0.107.0 2 / 2
0.106.0 2 / 2
0.105.0 2 / 2
0.104.0 2 / 2
0.103.0 2 / 2
0.102.1 2 / 2
0.102.0 2 / 2
0.101.0 2 / 2
0.100.0 2 / 2
0.99.0 2 / 2
0.98.1 2 / 2
0.98.0 2 / 2
0.97.0 2 / 2
0.96.0 2 / 2
0.95.0 2 / 2
0.94.1 2 / 2
0.94.0 2 / 2
0.93.0 2 / 2
0.92.0 2 / 2
0.91.0 2 / 2
0.90.1 2 / 2
0.90.0 2 / 2
0.89.0 2 / 2
0.88.1 2 / 2
0.88.0 2 / 2
0.87.0 2 / 2
0.86.0 2 / 2
0.85.1 2 / 2
0.85.0 2 / 2
0.84.0 2 / 2
0.83.1 2 / 2
0.83.0 2 / 2
0.82.1 2 / 2
0.82.0 2 / 2
0.81.1 2 / 2
0.81.0 2 / 2
0.80.0 2 / 2
0.79.1 2 / 2
0.79.0 2 / 2
0.78.0 2 / 2
0.77.1 2 / 2
0.77.0 2 / 2
0.76.0 2 / 2
0.75.2 2 / 2
0.75.1 2 / 2
Showing 100 of 192 Next page →

v0.155.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.155.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.155.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.154.0

6 findings
HIGH Long encoded string in modified file: dist/common/common_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/notifications/events_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/graphqlmetrics/v1/graphqlmetrics_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/node/v1/node_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

HIGH Long encoded string in modified file: dist/platform/v1/platform_pb.js source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.102.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.101.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.100.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.99.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.98.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.98.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.97.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.96.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.95.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.94.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.94.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.93.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.92.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.91.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.90.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.90.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.89.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.88.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.88.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.87.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.86.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.85.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.85.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.84.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.83.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.83.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.82.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.82.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.81.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.81.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.80.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.79.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.79.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.78.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.77.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.77.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.76.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.75.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.75.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.