generaltranslation
A language toolkit for AI developers
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@generaltranslation/icu | AI (dependencies): First-party scoped package from same publisher/org, replacing formatjs dep. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is first-party sibling package, not an external supply-chain risk. | ai | |
| provenance | slsa-provenance | AI (provenance): Package consistently publishes via CI/CD with SLSA provenance; stable signal for this package. | ai | |
| dependencies | unvetted-dep:@generaltranslation/format | AI (dependencies): First-party dependency from the same org (generaltranslation); expected for this package. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Established package with 349 versions and 12 approved dependents; dormancy likely reflects development cycle, not takeover. | ai | |
| phantom-deps | phantom-dep:intl-messageformat | AI (phantom-deps): intl-messageformat is a declared runtime dep; bundled output may not show direct import in source analysis. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publishing with SLSA attestation; consistent with org-level automation adoption. | ai |
Versions (showing 58 of 58)
| Version | Deps | Published |
|---|---|---|
| 9.0.4 | 3 / 3 | |
| 9.0.3 | 3 / 4 | |
| 9.0.2 | 3 / 4 | |
| 9.0.1 | 3 / 4 | |
| 9.0.0 | 3 / 4 | |
| 8.2.19 | 3 / 4 | |
| 8.2.18 | 3 / 4 | |
| 8.2.17 | 3 / 4 | |
| 8.2.16 | 3 / 4 | |
| 8.2.15 | 3 / 4 | |
| 8.2.14 | 3 / 4 | |
| 8.2.13 | 3 / 3 | |
| 8.2.12 | 3 / 3 | |
| 8.2.11 | 3 / 3 | |
| 8.2.10 | 3 / 3 | |
| 8.2.9 | 3 / 3 | |
| 8.2.8 | 3 / 3 | |
| 8.2.7 | 3 / 3 | |
| 8.2.6 | 3 / 9 | |
| 8.2.5 | 4 / 10 | |
| 8.2.4 | 4 / 10 | |
| 8.2.3 | 4 / 10 | |
| 8.2.2 | 4 / 10 | |
| 8.2.1 | 4 / 10 | |
| 8.2.0 | 4 / 10 | |
| 8.1.23 | 4 / 10 | |
| 8.1.22 | 4 / 10 | |
| 8.1.21 | 4 / 10 | |
| 8.1.20 | 4 / 10 | |
| 8.1.19 | 4 / 10 | |
| 8.1.18 | 4 / 10 | |
| 8.1.17 | 4 / 10 | |
| 8.1.16 | 4 / 10 | |
| 8.1.15 | 4 / 10 | |
| 8.1.14 | 4 / 10 | |
| 8.1.13 | 4 / 10 | |
| 8.1.12 | 4 / 10 | |
| 8.1.11 | 4 / 10 | |
| 8.1.10 | 4 / 10 | |
| 8.1.9 | 4 / 10 | |
| 8.1.8 | 4 / 10 | |
| 8.1.7 | 4 / 10 | |
| 8.1.6 | 4 / 10 | |
| 8.1.5 | 4 / 10 | |
| 8.1.4 | 4 / 10 | |
| 8.1.3 | 3 / 10 | |
| 8.1.2 | 3 / 10 | |
| 8.1.1 | 3 / 10 | |
| 8.1.0 | 3 / 10 | |
| 8.0.6 | 3 / 10 | |
| 8.0.5 | 3 / 10 | |
| 8.0.4 | 3 / 10 | |
| 8.0.3 | 3 / 10 | |
| 8.0.2 | 3 / 10 | |
| 8.0.1 | 3 / 10 | |
| 8.0.0 | 3 / 10 | |
| 7.9.1 | 3 / 10 | |
| 7.9.0 | 3 / 10 |
v9.0.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.0.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.0.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.0.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v9.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v8.2.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.