← Home

social-logos

npm Repository Homepage

A repository of all the social logos used on WordPress.com.

51
Versions
GPL-2.0+
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

macbreyuliyanmjangdamatticbota8cbloweryehg_sgomestyxlasaroshaganejclovrencicsirbrilligchriszaraterobersongomesjohngodleyjehervedaledupreez-a8ct2dw4tluismulinariandrea-sdlelazzabifmfernandessirrealwwachihsuanmanzoorwanijkmsurdi-a8cnewspack-npmdsmartgkthai15bgrgicakrobertsreberski_a8cartpigmjuhaszborkwebkat3samsinbrunobastodhenridevmrmurphywpvip-botetobiesenalshakeroarthur791004diliritymehmoodaknatalia.vidalivan.ottingeranandnalyaarcangelinisretrofoxiamchughmayanksimisonfredrikekelundchriskmndsoandregalgalatanovidiukangzj_mirka_aduthebuccelliockham

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:react-dom AI (phantom-deps): react-dom is a declared peer and runtime dependency; phantom-dep heuristic fires incorrectly for this package. ai
provenance publisher-changed AI (provenance): Automattic migrated publishing to GitHub Actions CI/CD; consistent with org-wide practice across Jetpack packages. ai

Versions (showing 51 of 56)

View all versions
Version Deps Published
3.3.18 1 / 12
3.3.17 1 / 12
3.3.16 1 / 12
3.3.15 1 / 12
3.3.14 1 / 12
3.3.13 1 / 12
3.3.12 1 / 12
3.3.11 1 / 12
3.3.10 1 / 12
3.3.9 1 / 12
3.3.8 1 / 12
3.3.7 1 / 12
3.3.6 1 / 12
3.3.5 1 / 12
3.3.4 3 / 10
3.3.3 3 / 10
3.3.2 3 / 10
3.3.1 3 / 10
3.3.0 3 / 10
3.2.11 3 / 10
3.2.10 3 / 10
3.2.9 3 / 10
3.2.8 3 / 10
3.2.7 3 / 10
3.2.6 3 / 10
3.2.5 3 / 10
3.2.4 3 / 10
3.2.3 3 / 10
3.2.2 3 / 10
3.2.1 3 / 10
3.2.0 3 / 10
3.1.21 3 / 10
3.1.20 3 / 10
3.1.19 3 / 10
3.1.18 3 / 10
3.1.17 3 / 10
3.1.16 3 / 10
3.1.15 3 / 10
3.1.14 3 / 10
3.1.13 3 / 10
3.1.12 3 / 10
3.1.11 3 / 10
3.1.10 3 / 10
3.1.9 3 / 10
3.1.8 3 / 10
3.1.7 3 / 10
3.1.6 3 / 10
3.1.5 3 / 10
3.1.4 3 / 10
3.1.3 3 / 10
3.1.2 3 / 10

v3.3.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.3.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.1.20

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.19

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.18

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.17

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.16

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.15

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.