← Home

@zipbul/baker

npm Repository Homepage
21
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

parkrevil

Keywords

aotbunclass-transformerclass-validatorclass-validator-alternativecode-generationdecoratordeserializedtofast-validationruntime-validationschema-validationserializetransformtransformertype-safetypescriptvalidationvalidatorzod-alternative

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/index-gcptd79v.js AI (source-diff): Bun bundler output (// @bun header, readable minified ESM); not obfuscated, stable pattern for this package. ai
source-diff obfuscated-file:dist/index-3gcf6hkv.js AI (source-diff): Bun bundler output (// @bun header); minified ESM split chunk, not obfuscated malware. ai
source-diff obfuscated-file:dist/index-wy5sh2nx.js AI (source-diff): Bun bundler output (// @bun header); minified ESM split chunk, not obfuscated malware. ai
source-diff obfuscated-file:dist/index-jzjz61tg.js AI (source-diff): Standard Bun bundler output with linked sourcemap; not obfuscated, just minified ESM. ai
provenance publisher-changed AI (provenance): Transition from personal account to GitHub Actions CI/CD is expected and backed by SLSA provenance attestation. ai

Versions (showing 21 of 21)

Version Deps Published
6.0.0 1 / 22
5.1.0 1 / 21
5.0.0 1 / 21
4.0.0 1 / 21
3.4.1 1 / 21
3.4.0 1 / 21
3.3.1 1 / 21
3.3.0 1 / 21
3.2.0 1 / 21
3.1.0 1 / 21
3.0.1 1 / 21
3.0.0 1 / 21
2.2.0 1 / 16
2.1.0 1 / 16
2.0.0 1 / 14
1.1.0 1 / 5
1.0.0 1 / 5
0.1.2 1 / 5
0.1.1 1 / 5
0.1.0 1 / 5
0.0.1 1 / 5

v6.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.