← Home

@wundergraph/protographic

npm Repository Homepage

A tool for converting GraphQL Schema Definition Language (SDL) to Protocol Buffers and mapping files.

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

gausiegmasgraspepolsuvijsuryadavidwgthisisnithinwilson.wundergraph

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI/CD publishing with SLSA attestation; consistent with WunderGraph monorepo practices. ai
maintainer-change maintainer-added AI (maintainer-change): New maintainers added to established WunderGraph org package; consistent with team growth, not a takeover signal. ai
phantom-deps phantom-dep:@bufbuild/protobuf AI (phantom-deps): @bufbuild/protobuf is a declared runtime dep used transitively; phantom-dep heuristic is a false positive for this package. ai

Versions (showing 51 of 92)

View all versions
Version Deps Published
0.24.4 6 / 8
0.24.3 6 / 8
0.24.2 6 / 8
0.24.1 6 / 8
0.24.0 6 / 8
0.23.24 6 / 8
0.23.23 6 / 8
0.23.15 6 / 8
0.23.14 6 / 8
0.23.13 6 / 8
0.23.12 6 / 8
0.23.10 6 / 8
0.23.9 6 / 8
0.23.8 6 / 8
0.23.7 6 / 8
0.23.5 6 / 8
0.23.4 6 / 8
0.23.3 6 / 8
0.23.2 6 / 8
0.23.1 6 / 8
0.23.0 6 / 8
0.22.1 6 / 8
0.22.0 6 / 8
0.21.0 6 / 8
0.20.3 6 / 8
0.20.2 6 / 8
0.20.1 6 / 8
0.20.0 6 / 8
0.19.2 6 / 8
0.19.1 6 / 8
0.19.0 6 / 8
0.18.2 6 / 8
0.18.1 6 / 8
0.18.0 6 / 8
0.17.3 6 / 8
0.17.2 6 / 8
0.17.1 6 / 8
0.17.0 6 / 8
0.16.3 6 / 8
0.16.2 6 / 8
0.16.1 6 / 8
0.16.0 6 / 8
0.15.6 5 / 5
0.15.5 5 / 5
0.15.4 5 / 5
0.15.3 5 / 5
0.15.2 5 / 5
0.15.1 5 / 5
0.15.0 5 / 5
0.14.0 5 / 5
0.13.0 5 / 4

v0.24.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.24.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.24.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.24.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.24.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.23.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.