← Home

sst

95
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

thdxrfanjievimtorsst-publisher

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:jest AI (typosquat): SST is a well-known cloud framework brand, not a typo of jest. ai
typosquat typosquat.levenshtein:got AI (typosquat): SST is a well-known cloud framework brand, not a typo of got. ai
typosquat typosquat.levenshtein:qs AI (typosquat): SST is a well-known cloud framework brand, not a typo of qs. ai

Versions (showing 95 of 95)

Version Deps Published
4.17.1 4 / 9
4.17.0 4 / 9
4.16.0 4 / 9
4.15.2 4 / 9
4.15.1 4 / 9
4.15.0 4 / 9
4.14.3 4 / 9
4.14.1 4 / 9
4.14.0 4 / 9
4.13.2 4 / 9
4.13.1 4 / 9
4.13.0 4 / 9
4.12.11 4 / 9
4.12.10 4 / 9
4.12.9 4 / 9
4.12.8 4 / 9
4.12.7 4 / 9
4.12.5 4 / 9
4.12.4 4 / 9
4.12.3 4 / 9
4.12.2 4 / 9
4.12.1 4 / 9
4.12.0 4 / 9
4.11.0 4 / 9
4.10.2 4 / 9
4.10.1 4 / 9
4.10.0 4 / 9
4.9.3 4 / 9
4.9.2 4 / 9
4.9.1 4 / 9
4.9.0 4 / 9
4.8.0 4 / 9
4.7.9 4 / 9
4.7.8 4 / 9
4.7.7 4 / 9
4.7.6 4 / 9
4.7.5 4 / 9
4.7.4 4 / 9
4.7.3 4 / 9
4.7.2 4 / 9
4.7.1 4 / 9
4.7.0 4 / 9
4.6.11 3 / 8
4.6.10 3 / 8
4.6.9 3 / 8
4.6.8 3 / 8
4.6.7 3 / 8
4.6.6 3 / 8
4.6.5 3 / 8
4.6.4 3 / 8
4.6.3 3 / 8
4.5.12 3 / 8
4.5.11 3 / 8
4.5.10 3 / 8
4.5.9 3 / 8
4.5.8 3 / 8
4.5.7 3 / 8
4.5.6 3 / 8
4.5.5 3 / 8
4.5.4 3 / 8
4.5.3 3 / 8
4.5.2 3 / 8
4.5.1 3 / 8
4.5.0 3 / 8
4.4.0 3 / 8
4.3.9 3 / 8
4.3.8 3 / 8
4.3.7 3 / 8
4.3.6 3 / 8
4.3.5 3 / 8
4.3.4 3 / 8
4.3.3 3 / 8
4.3.2 3 / 8
4.3.1 3 / 8
4.3.0 3 / 8
4.2.7 3 / 8
4.2.6 3 / 8
4.2.5 3 / 8
4.2.4 3 / 8
4.2.2 3 / 8
4.2.1 3 / 8
4.2.0 3 / 8
4.1.11 3 / 8
4.1.10 3 / 8
4.1.9 3 / 8
4.1.8 3 / 8
4.1.7 3 / 8
4.1.6 3 / 8
4.1.5 3 / 8
4.1.4 3 / 8
4.1.3 3 / 8
4.1.2 3 / 8
4.1.1 3 / 8
4.1.0 3 / 8
4.0.7 3 / 8

v4.17.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.17.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.