cdk-from-cfn
Turn AWS CloudFormation templates into AWS CDK applications
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | bundled-binaries | AI (npm-metadata): index_bg.wasm is the package's core wasm-bindgen output; expected every version. | ai |
Versions (showing 100 of 303)
| Version | Deps | Published |
|---|---|---|
| 0.319.0 | 0 / 0 | |
| 0.318.0 | 0 / 0 | |
| 0.317.0 | 0 / 0 | |
| 0.316.0 | 0 / 0 | |
| 0.315.0 | 0 / 0 | |
| 0.314.0 | 0 / 0 | |
| 0.313.0 | 0 / 0 | |
| 0.312.0 | 0 / 0 | |
| 0.311.0 | 0 / 0 | |
| 0.310.0 | 0 / 0 | |
| 0.309.0 | 0 / 0 | |
| 0.308.0 | 0 / 0 | |
| 0.307.0 | 0 / 0 | |
| 0.306.0 | 0 / 0 | |
| 0.305.0 | 0 / 0 | |
| 0.304.0 | 0 / 0 | |
| 0.303.0 | 0 / 0 | |
| 0.302.0 | 0 / 0 | |
| 0.301.0 | 0 / 0 | |
| 0.300.0 | 0 / 0 | |
| 0.299.0 | 0 / 0 | |
| 0.298.0 | 0 / 0 | |
| 0.297.0 | 0 / 0 | |
| 0.296.0 | 0 / 0 | |
| 0.295.0 | 0 / 0 | |
| 0.294.0 | 0 / 0 | |
| 0.293.0 | 0 / 0 | |
| 0.292.0 | 0 / 0 | |
| 0.291.0 | 0 / 0 | |
| 0.290.0 | 0 / 0 | |
| 0.289.0 | 0 / 0 | |
| 0.288.0 | 0 / 0 | |
| 0.287.0 | 0 / 0 | |
| 0.286.0 | 0 / 0 | |
| 0.285.0 | 0 / 0 | |
| 0.284.0 | 0 / 0 | |
| 0.283.0 | 0 / 0 | |
| 0.282.0 | 0 / 0 | |
| 0.281.0 | 0 / 0 | |
| 0.280.0 | 0 / 0 | |
| 0.279.0 | 0 / 0 | |
| 0.278.0 | 0 / 0 | |
| 0.277.0 | 0 / 0 | |
| 0.276.0 | 0 / 0 | |
| 0.275.0 | 0 / 0 | |
| 0.274.0 | 0 / 0 | |
| 0.273.0 | 0 / 0 | |
| 0.272.0 | 0 / 0 | |
| 0.271.0 | 0 / 0 | |
| 0.270.0 | 0 / 0 | |
| 0.269.0 | 0 / 0 | |
| 0.268.0 | 0 / 0 | |
| 0.267.0 | 0 / 0 | |
| 0.266.0 | 0 / 0 | |
| 0.265.0 | 0 / 0 | |
| 0.264.0 | 0 / 0 | |
| 0.263.0 | 0 / 0 | |
| 0.262.0 | 0 / 0 | |
| 0.261.0 | 0 / 0 | |
| 0.258.0 | 0 / 0 | |
| 0.257.0 | 0 / 0 | |
| 0.256.0 | 0 / 0 | |
| 0.255.0 | 0 / 0 | |
| 0.254.0 | 0 / 0 | |
| 0.253.0 | 0 / 0 | |
| 0.252.0 | 0 / 0 | |
| 0.251.0 | 0 / 0 | |
| 0.250.0 | 0 / 0 | |
| 0.249.0 | 0 / 0 | |
| 0.248.0 | 0 / 0 | |
| 0.247.0 | 0 / 0 | |
| 0.246.0 | 0 / 0 | |
| 0.245.0 | 0 / 0 | |
| 0.244.0 | 0 / 0 | |
| 0.243.0 | 0 / 0 | |
| 0.242.0 | 0 / 0 | |
| 0.241.0 | 0 / 0 | |
| 0.240.0 | 0 / 0 | |
| 0.239.0 | 0 / 0 | |
| 0.238.0 | 0 / 0 | |
| 0.237.0 | 0 / 0 | |
| 0.236.0 | 0 / 0 | |
| 0.235.0 | 0 / 0 | |
| 0.234.0 | 0 / 0 | |
| 0.233.0 | 0 / 0 | |
| 0.232.0 | 0 / 0 | |
| 0.231.0 | 0 / 0 | |
| 0.230.0 | 0 / 0 | |
| 0.229.0 | 0 / 0 | |
| 0.228.0 | 0 / 0 | |
| 0.227.0 | 0 / 0 | |
| 0.226.0 | 0 / 0 | |
| 0.225.0 | 0 / 0 | |
| 0.224.0 | 0 / 0 | |
| 0.223.0 | 0 / 0 | |
| 0.222.0 | 0 / 0 | |
| 0.221.0 | 0 / 0 | |
| 0.220.0 | 0 / 0 | |
| 0.219.0 | 0 / 0 | |
| 0.218.0 | 0 / 0 |
v0.319.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.318.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.317.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.316.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.315.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.314.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.313.0
2 findingsPackage contains compiled binaries that could be backdoors: • index_bg.wasm
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.312.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.311.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.