← Home

rdme

npm Repository Homepage

ReadMe's official CLI and GitHub Action.

22
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

gkobergerdomharringtonmjcuvajonursenbachrafegoldbergdarrenyongowlbert

Keywords

apiapidocapisdocumentationmicroserviceoaioasopenapiopenapi documentopenapi initiativeopenapi specopenapi specificationpostmanreadmeswagger

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@oclif/plugin-help AI (phantom-deps): oclif framework loads plugins via config; not direct imports. ai
phantom-deps phantom-dep:@oclif/plugin-plugins AI (phantom-deps): oclif framework loads plugins via config; not direct imports. ai
phantom-deps phantom-dep:@oclif/plugin-autocomplete AI (phantom-deps): oclif framework loads plugins via config; not direct imports. ai
phantom-deps phantom-dep:@oclif/plugin-warn-if-update-available AI (phantom-deps): oclif framework loads plugins via config; not direct imports. ai

Versions (showing 22 of 22)

Version Deps Published
10.9.3 31 / 30
10.9.2 31 / 30
10.9.1 31 / 31
10.9.0 31 / 31
10.8.0 30 / 31
10.7.0 30 / 31
10.6.2 30 / 32
10.6.1 30 / 32
10.6.0 30 / 33
10.5.3 31 / 34
10.5.2 31 / 35
10.5.1 31 / 35
10.5.0 31 / 35
10.4.0 31 / 35
10.3.0 31 / 35
10.2.2 31 / 35
10.2.1 31 / 35
10.2.0 31 / 35
10.1.1 26 / 36
10.1.0 26 / 36
10.0.0 27 / 37
9.2.3 27 / 37

v10.9.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.9.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.