← Home

@wundergraph/cosmo-shared

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

gausiegmasgraspepolsuvijsuryadavidwgthisisnithinwilson.wundergraph

Keywords

wundergraph-cosmoshared

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:pino AI (phantom-deps): pino is a declared runtime dependency; phantom-dep heuristic misfires for this package. ai
phantom-deps phantom-dep:@graphql-tools/schema AI (phantom-deps): @graphql-tools/schema is a declared runtime dependency; phantom-dep heuristic misfires for this package. ai

Versions (showing 51 of 285)

View all versions
Version Deps Published
0.49.4 7 / 5
0.49.3 7 / 5
0.49.2 7 / 5
0.49.1 7 / 5
0.49.0 7 / 5
0.48.5 7 / 5
0.48.4 7 / 5
0.46.15 7 / 5
0.46.14 7 / 5
0.46.13 7 / 5
0.46.12 7 / 5
0.46.10 7 / 5
0.46.9 7 / 5
0.46.8 7 / 5
0.46.7 7 / 5
0.46.5 7 / 5
0.46.4 7 / 5
0.46.3 7 / 5
0.46.2 7 / 5
0.46.1 7 / 5
0.46.0 7 / 5
0.45.7 7 / 5
0.45.6 7 / 5
0.45.5 7 / 5
0.45.4 7 / 5
0.45.3 7 / 5
0.45.2 7 / 5
0.45.1 7 / 5
0.45.0 7 / 5
0.44.5 7 / 5
0.44.4 7 / 5
0.44.3 7 / 5
0.44.2 7 / 5
0.44.1 7 / 5
0.44.0 7 / 5
0.43.7 7 / 5
0.43.6 7 / 5
0.43.5 7 / 5
0.43.4 7 / 5
0.43.3 7 / 5
0.43.2 7 / 5
0.43.1 7 / 5
0.43.0 7 / 5
0.42.30 7 / 5
0.42.29 7 / 5
0.42.28 7 / 5
0.42.27 7 / 5
0.42.26 7 / 5
0.42.25 7 / 5
0.42.24 7 / 5
0.42.23 7 / 5

v0.49.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.49.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.49.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.49.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.49.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.