n3
7
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
rubenverborghrubensworks
Keywords
turtlerdfn3streamingasynchronous
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from rubensworks to GitHub Actions is a legitimate CI/CD automation move for the rdfjs/N3.js project, backed by SLSA provenance attestation. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Package has 139 versions and is actively maintained; dormancy signal is a measurement artifact. SLSA attestation confirms legitimate CI/CD publish. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): n3 is a 14-year-old legitimate RDF library (N3.js), not a typosquat of pg. Short name similarity is coincidental; packages serve entirely different purposes. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): n3 is a 14-year-old legitimate RDF library (N3.js), not a typosquat of qs. Short name similarity is coincidental; packages serve entirely different purposes. | ai |
Versions (showing 7 of 7)
| Version | Deps | Published |
|---|---|---|
| 2.1.1 | 2 / 20 | |
| 2.1.0 | 2 / 20 | |
| 2.0.4 | 2 / 18 | |
| 2.0.3 | 2 / 18 | |
| 2.0.2 | 2 / 18 | |
| 2.0.1 | 2 / 18 | |
| 2.0.0 | 2 / 18 |
v2.1.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.