koa-favicon
favicon bounce middleware for koa
8
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
aheckmanncoderhaoxindead_horseeivifjfengmk2jongleberryjuliangrubertjholowaychuk
Keywords
koamiddlewarefavicon
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Legitimate maintainer transition within koajs org from jongleberry to coderhaoxin in 2018; both are established koajs contributors. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): coderhaoxin is a long-standing koajs maintainer with strong track record (321 approved packages). | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance; published in 2018 when attestation was not available. | ai |