← Home

terra-draw

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

jamesmilneruk

Keywords

mapdrawingdrawmap drawinggeometryarcgisleafletmaplibreopenlayersmapbox

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:dynamic-require AI (semgrep): Fires in .versionrc.cjs which resolves a hardcoded package.json path; not arbitrary module loading. ai

Versions (showing 51 of 65)

View all versions
Version Deps Published
1.32.2 0 / 0
1.32.1 0 / 0
1.32.0 0 / 0
1.31.2 0 / 0
1.31.1 0 / 0
1.31.0 0 / 0
1.30.1 0 / 0
1.30.0 0 / 0
1.29.0 0 / 0
1.28.8 0 / 0
1.28.7 0 / 0
1.28.6 0 / 0
1.28.5 0 / 0
1.28.4 0 / 0
1.28.3 0 / 0
1.28.2 0 / 0
1.28.1 0 / 0
1.28.0 0 / 0
1.27.0 0 / 0
1.26.0 0 / 0
1.25.1 0 / 0
1.25.0 0 / 0
1.24.2 0 / 0
1.24.1 0 / 0
1.24.0 0 / 0
1.23.3 0 / 0
1.23.2 0 / 0
1.23.1 0 / 0
1.23.0 0 / 0
1.22.0 0 / 0
1.21.4 0 / 0
1.21.3 0 / 0
1.21.2 0 / 0
1.21.1 0 / 0
1.21.0 0 / 0
1.20.0 0 / 0
1.19.0 0 / 0
1.18.1 0 / 0
1.18.0 0 / 0
1.17.0 0 / 0
1.16.0 0 / 0
1.15.0 0 / 0
1.14.0 0 / 0
1.13.0 0 / 0
1.12.0 0 / 0
1.11.0 0 / 0
1.10.0 0 / 0
1.9.1 0 / 0
1.9.0 0 / 0
1.8.0 0 / 0
1.7.0 0 / 0

v1.32.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.32.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.32.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.