← Home

@x402/hono

npm Repository
21
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

carsonroscoe_cberik_cb

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
bogus-package bogus-package AI (bogus-package): Scoped monorepo stub from Coinbase; tiny payload/empty main is expected for early placeholder releases in this package family. ai
typosquat typosquat.levenshtein:pino AI (typosquat): Scoped monorepo package @x402/hono; Levenshtein match to 'pino' is coincidental, not a typosquat. ai

Versions (showing 21 of 21)

Version Deps Published
2.19.0 2 / 16
2.18.0 2 / 16
2.17.0 2 / 16
2.16.0 2 / 16
2.15.0 2 / 16
2.14.0 2 / 16
2.13.0 2 / 16
2.12.0 2 / 16
2.11.0 3 / 16
2.10.0 3 / 16
2.9.0 3 / 16
2.8.0 3 / 16
2.7.0 3 / 16
2.6.0 3 / 16
2.5.0 3 / 16
2.4.0 3 / 16
2.3.0 3 / 16
2.2.0 3 / 16
2.1.0 3 / 16
2.0.0 3 / 16
0.0.1 0 / 0

v2.19.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.18.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.