← Home

js-cookie

npm Repository Homepage

A simple, lightweight JavaScript API for handling cookies

2
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

carhartlfagner

Keywords

cookiecookiesbrowseramdcommonjsclientjs-cookie

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata url-dep:browserstack-runner AI (npm-metadata): SHA-pinned github dep is dev-only test runner, not shipped. ai
provenance publisher-changed AI (provenance): Transition from manual to GitHub Actions CI/CD publishing with SLSA provenance; legitimate for this package. ai
publish-pattern dormant-publish AI (publish-pattern): Stable mature package; infrequent releases are normal for js-cookie. ai

Versions (showing 2 of 2)

Version Deps Published
3.0.8 0 / 25
3.0.7 0 / 25

v3.0.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.0.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.