← Home

groq

npm Repository Homepage

Tagged template literal for Sanity.io GROQ-queries

51
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

kmelvebjoergerexxarsskogsmaskinmariuslundgardsanity-svc.npmsanity-iosimenss

Keywords

cmscontentgroqheadlessliteralrealtimesanitystringtaggedtemplate

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): sanity-svc.npm is Sanity's service account with 71 approved packages; SLSA attestation confirms CI/CD origin. ai
maintainer-change maintainer-added AI (maintainer-change): Addition of sanity-svc.npm is a legitimate org-level service account transition, not a third-party takeover. ai
typosquat typosquat.levenshtein:glob AI (typosquat): groq is the legitimate Sanity.io GROQ query language package, not a typosquat of glob. ai
typosquat typosquat.levenshtein:got AI (typosquat): groq is the legitimate Sanity.io GROQ query language package, not a typosquat of got. ai

Versions (showing 51 of 62)

View all versions
Version Deps Published
6.6.0 0 / 6
6.5.0 0 / 6
6.4.0 0 / 6
6.3.0 0 / 6
6.2.0 0 / 6
6.1.0 0 / 8
6.0.0 0 / 8
5.31.1 0 / 8
5.31.0 0 / 8
5.30.0 0 / 8
5.29.0 0 / 8
5.28.0 0 / 8
5.27.0 0 / 8
5.26.0 0 / 8
5.25.1 0 / 8
5.25.0 0 / 8
5.24.0 0 / 8
5.23.0 0 / 8
5.22.0 0 / 8
5.21.0 0 / 8
5.20.0 0 / 8
5.19.0 0 / 8
5.18.0 0 / 8
5.17.1 0 / 8
5.17.0 0 / 8
5.16.0 0 / 8
5.15.0 0 / 8
5.14.1 0 / 8
5.14.0 0 / 8
5.13.0 0 / 8
5.12.0 0 / 8
5.11.0 0 / 8
5.10.0 0 / 8
5.9.0 0 / 8
5.8.1 0 / 8
5.8.0 0 / 8
5.7.0 0 / 8
5.6.0 0 / 8
5.5.0 0 / 8
5.4.0 0 / 8
5.3.1 0 / 8
5.3.0 0 / 8
5.2.0 0 / 8
5.1.0 0 / 8
5.0.1 0 / 8
5.0.0 0 / 8
4.22.0 0 / 8
4.21.1 0 / 8
4.21.0 0 / 8
4.20.3 0 / 8
4.20.2 0 / 8

v6.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.4.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.