← Home

jsii-release

npm Repository Homepage

Release jsii modules to multiple package managers

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

aws-cdk-teamcdklabs-automation

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:lib/bin/publib-maven.js AI (source-diff): Standard TypeScript compiler output (bundled bin); not obfuscated malicious code. ai
semgrep semgrep:env-spread AI (semgrep): Release tool intentionally passes env vars (GPG keys, credentials) to subprocesses; pattern is expected and stable. ai
semgrep semgrep:child-process-import AI (semgrep): Publishing tool invokes CLI tools (gpg, maven, npm, etc.) via child_process by design; stable for this package. ai
bogus-package bogus-package AI (bogus-package): Known cdklabs/AWS tool; README link-dump and missing keywords are cosmetic issues, not spam indicators. ai
phantom-deps phantom-dep:@types/fs-extra AI (phantom-deps): @types/fs-extra is a type declaration package; not directly imported at runtime by convention. ai

Versions (showing 100 of 230)

Version Deps Published
0.2.1057 10 / 20
0.2.1056 10 / 20
0.2.1055 10 / 20
0.2.1054 10 / 20
0.2.1053 10 / 20
0.2.1052 10 / 20
0.2.1051 10 / 20
0.2.1050 10 / 20
0.2.1049 10 / 20
0.2.1048 10 / 20
0.2.1047 10 / 20
0.2.1046 10 / 20
0.2.1045 10 / 20
0.2.1044 10 / 20
0.2.1043 10 / 20
0.2.1042 10 / 20
0.2.1041 10 / 20
0.2.1040 10 / 20
0.2.1039 10 / 20
0.2.1038 10 / 20
0.2.1037 10 / 20
0.2.1036 10 / 20
0.2.1035 10 / 20
0.2.1034 10 / 20
0.2.1033 10 / 20
0.2.1032 10 / 20
0.2.1031 10 / 20
0.2.1030 10 / 20
0.2.1029 10 / 20
0.2.1028 10 / 20
0.2.1027 10 / 20
0.2.1026 10 / 20
0.2.1025 10 / 20
0.2.1024 10 / 20
0.2.1023 10 / 20
0.2.1022 10 / 20
0.2.1021 10 / 20
0.2.1020 10 / 20
0.2.1019 10 / 20
0.2.1018 10 / 20
0.2.1017 10 / 20
0.2.1016 10 / 20
0.2.1015 10 / 20
0.2.1014 10 / 20
0.2.1013 10 / 20
0.2.1012 10 / 20
0.2.1011 10 / 20
0.2.1010 10 / 20
0.2.1009 10 / 20
0.2.1008 10 / 20
0.2.1007 10 / 20
0.2.1006 10 / 20
0.2.1005 10 / 20
0.2.1004 10 / 20
0.2.1003 10 / 20
0.2.1002 10 / 20
0.2.1001 10 / 20
0.2.1000 10 / 20
0.2.999 10 / 20
0.2.998 10 / 20
0.2.997 10 / 20
0.2.996 10 / 20
0.2.995 10 / 20
0.2.994 10 / 20
0.2.993 10 / 20
0.2.992 10 / 20
0.2.991 10 / 20
0.2.990 10 / 20
0.2.989 10 / 20
0.2.988 9 / 19
0.2.987 9 / 19
0.2.986 9 / 19
0.2.985 9 / 19
0.2.984 9 / 19
0.2.983 9 / 19
0.2.982 9 / 19
0.2.981 9 / 19
0.2.980 9 / 19
0.2.979 9 / 19
0.2.978 9 / 19
0.2.977 9 / 19
0.2.976 9 / 19
0.2.975 9 / 19
0.2.974 9 / 19
0.2.973 9 / 19
0.2.972 9 / 19
0.2.971 9 / 19
0.2.970 9 / 19
0.2.969 9 / 19
0.2.968 9 / 19
0.2.967 9 / 19
0.2.966 9 / 19
0.2.965 9 / 19
0.2.964 9 / 19
0.2.963 9 / 19
0.2.962 9 / 19
0.2.961 9 / 19
0.2.960 9 / 19
0.2.959 9 / 19
0.2.958 9 / 19
Showing 100 of 230 Next page →

v0.2.1057

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.1056

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.1055

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.1054

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.1053

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.1052

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.974

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.973

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.972

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.971

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.970

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.969

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.968

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.967

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.966

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.965

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.964

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.963

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.962

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.961

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.960

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.959

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.958

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.