← Home

create-wdio

15
Versions
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

wdio-user

Keywords

webdriveriocreate-wdiowdioinstallere2e

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): WebdriverIO monorepo migrated to GitHub Actions publishing with SLSA attestation; stable for this package. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy reflects monorepo CI migration, not account takeover; SLSA provenance confirms legitimate publish. ai

Versions (showing 15 of 15)

Version Deps Published
9.30.0 13 / 6
9.29.1 13 / 6
9.29.0 13 / 6
9.28.0 13 / 6
9.27.2 13 / 6
9.27.1 13 / 6
9.27.0 13 / 6
9.26.1 13 / 6
9.26.0 13 / 6
9.25.0 13 / 6
9.21.0 13 / 6
9.18.2 13 / 6
9.18.0 13 / 6
9.17.1 13 / 6
9.17.0 13 / 6

v9.30.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.