← Home

starpc

npm Repository Homepage

Streaming protobuf RPC service protocol over any two-way channel.

100
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

paralin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
install-scripts install-script:postinstall AI (install-scripts): postinstall runs 'go mod vendor' — safe Go dependency vendoring, stable for this hybrid Go/TS package. ai
provenance slsa-provenance AI (provenance): Package consistently published via CI with SLSA attestation; GitHub Actions publisher is expected. ai
provenance publisher-changed AI (provenance): Transition from paralin to GitHub Actions CI is consistent with SLSA-attested automated publishing pipeline. ai
publish-pattern dormant-publish AI (publish-pattern): 191-day gap explained by CI/CD pipeline migration; SLSA attestation confirms legitimate publish. ai
dependencies unvetted-dep:@aptre/yamux AI (dependencies): Same org as starpc (Aperture Robotics); internal dep swap, stable pattern for this package. ai
dependencies unvetted-dep:@aptre/it-ws AI (dependencies): First-party dependency from the same Aperture Robotics org as starpc itself. ai
dependencies unvetted-dep:@aptre/protobuf-es-lite AI (dependencies): First-party dependency from the same Aperture Robotics org as starpc itself. ai
phantom-deps phantom-dep:ws AI (phantom-deps): ws is a declared runtime dep used indirectly via isomorphic-ws; phantom-dep false positive stable for this package. ai

Versions (showing 100 of 200)

Version Deps Published
0.49.20 11 / 18
0.49.18 11 / 18
0.49.17 11 / 18
0.49.16 11 / 18
0.49.15 11 / 18
0.49.14 11 / 18
0.49.13 11 / 18
0.49.11 11 / 18
0.49.10 11 / 18
0.49.9 11 / 18
0.49.8 11 / 18
0.49.7 11 / 18
0.49.6 11 / 18
0.49.4 12 / 18
0.49.3 12 / 18
0.49.2 12 / 18
0.49.1 12 / 18
0.49.0 12 / 18
0.48.0 12 / 18
0.47.1 12 / 18
0.47.0 12 / 18
0.46.2 12 / 15
0.46.1 12 / 15
0.46.0 12 / 15
0.45.0 12 / 15
0.44.0 12 / 15
0.43.1 12 / 15
0.42.0 12 / 15
0.41.2 12 / 14
0.41.1 12 / 14
0.41.0 12 / 14
0.40.1 14 / 13
0.40.0 14 / 13
0.39.10 12 / 13
0.39.9 12 / 13
0.39.8 12 / 13
0.39.7 12 / 13
0.39.6 12 / 13
0.39.5 12 / 13
0.39.4 12 / 13
0.39.3 12 / 13
0.39.2 13 / 13
0.39.1 13 / 13
0.39.0 13 / 13
0.38.1 13 / 13
0.38.0 13 / 13
0.37.1 13 / 13
0.37.0 13 / 13
0.36.4 13 / 13
0.36.3 13 / 13
0.36.2 13 / 13
0.36.1 13 / 13
0.36.0 13 / 13
0.35.5 13 / 13
0.35.4 13 / 13
0.35.3 13 / 13
0.35.2 13 / 13
0.35.1 13 / 13
0.35.0 13 / 13
0.34.0 13 / 13
0.33.11 13 / 13
0.33.10 13 / 13
0.33.9 13 / 13
0.33.8 13 / 13
0.33.7 13 / 13
0.33.6 13 / 13
0.33.5 13 / 13
0.33.4 13 / 13
0.33.3 13 / 13
0.33.1 13 / 13
0.33.0 13 / 13
0.32.18 13 / 13
0.32.17 13 / 13
0.32.16 13 / 13
0.32.15 13 / 13
0.32.14 13 / 12
0.32.13 13 / 12
0.32.12 13 / 12
0.32.11 13 / 12
0.32.10 13 / 12
0.32.9 13 / 12
0.32.8 13 / 12
0.32.7 13 / 12
0.32.6 13 / 12
0.32.4 13 / 12
0.32.3 13 / 12
0.32.2 13 / 12
0.32.1 13 / 12
0.32.0 13 / 12
0.31.14 13 / 12
0.31.13 13 / 12
0.31.12 13 / 12
0.31.11 15 / 12
0.31.10 15 / 12
0.31.9 15 / 12
0.31.8 15 / 12
0.31.7 15 / 12
0.31.6 14 / 11
0.31.5 14 / 11
0.31.4 15 / 11
Showing 100 of 200 Next page →

v0.49.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.38.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.38.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.37.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.37.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.36.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.36.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.36.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.36.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.36.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.35.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.34.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.33.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.18

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.17

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.16

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.15

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.32.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.31.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.31.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.31.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.