← Home

d2l-test-reporting

npm Repository Homepage
41
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

d2l-travis-deploy

Keywords

d2ltestreporting

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance no-provenance AI (provenance): publishConfig sets provenance:true; attestation absence is a tooling/timing artifact, not a policy violation for this package. ai
dependencies unvetted-dep:@web/test-runner-core AI (dependencies): @web/test-runner-core is a well-known Modern Web testing library; stable legitimate dependency for this test-reporting package. ai

Versions (showing 41 of 41)

Version Deps Published
6.4.1 10 / 29
6.4.0 10 / 29
6.3.6 10 / 29
6.3.5 10 / 29
6.3.4 10 / 29
6.3.3 10 / 29
6.3.2 11 / 29
6.3.1 12 / 29
6.3.0 11 / 29
6.2.0 11 / 27
6.1.1 11 / 27
6.1.0 11 / 27
6.0.7 11 / 27
6.0.6 11 / 27
6.0.5 11 / 27
6.0.4 11 / 27
6.0.3 11 / 27
6.0.2 11 / 27
6.0.1 11 / 27
6.0.0 11 / 27
5.2.13 11 / 27
5.2.12 11 / 27
5.2.11 11 / 27
5.2.10 11 / 28
5.2.9 11 / 28
5.2.8 11 / 28
5.2.7 11 / 28
5.2.6 11 / 28
5.2.5 10 / 28
5.2.4 10 / 27
5.2.3 10 / 27
5.2.2 11 / 27
5.2.1 11 / 27
5.2.0 11 / 27
5.1.0 11 / 27
5.0.1 10 / 27
5.0.0 10 / 27
4.3.2 10 / 27
4.3.1 10 / 27
4.3.0 9 / 27
4.2.6 9 / 20

v6.4.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.4.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.