tscircuit
Make electronics using Typescript, React, and AI tools.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:connectivity-map | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/miniflex | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@flatten-js/core | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/schematic-trace-solver | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:circuit-json-to-connectivity-map | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/schematic-match-adapt | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/ngspice-spice-engine | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/copper-pour-solver | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:kicad-component-converter | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:circuit-json-to-simple-3d | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:calculate-cell-boundaries | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/simple-3d-svg | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/solver-utils | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/image-utils | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:kicad-to-circuit-json | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:circuit-json-to-spice | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:circuit-json-to-gltf | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:@tscircuit/matchpack | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| phantom-deps | phantom-dep:circuit-json-to-bpc | AI (phantom-deps): Config-referenced deps in established monorepo; stable pattern. | ai | |
| dependencies | unvetted-dep:@tscircuit/schematic-corpus | AI (dependencies): First-party tscircuit org package, part of same monorepo family. | ai | |
| phantom-deps | phantom-dep:calculate-elbow | AI (phantom-deps): Re-exported meta-package dep, not directly imported by design. | ai | |
| phantom-deps | phantom-dep:@tscircuit/create-fdm-enclosure | AI (phantom-deps): Official tscircuit scoped package, likely used indirectly via build/runtime wiring. | ai | |
| dependencies | unvetted-dep:@tscircuit/create-fdm-enclosure | AI (dependencies): First-party tscircuit org package, consistent with monorepo ecosystem. | ai | |
| phantom-deps | phantom-dep:@resvg/resvg-js | AI (phantom-deps): Bundled ecosystem dep, config-referenced not directly imported; stable false positive. | ai | |
| phantom-deps | phantom-dep:minicssgrid | AI (phantom-deps): Monorepo sub-package, consistent false positive pattern for tscircuit. | ai | |
| phantom-deps | phantom-dep:graphics-debug | AI (phantom-deps): Monorepo sub-package, consistent false positive pattern for tscircuit. | ai | |
| phantom-deps | phantom-dep:circuit-to-svg | AI (phantom-deps): Monorepo sub-package, consistent false positive pattern for tscircuit. | ai | |
| phantom-deps | phantom-dep:jscad-planner | AI (phantom-deps): Monorepo sub-package, consistent false positive pattern for tscircuit. | ai | |
| phantom-deps | phantom-dep:s-expression | AI (phantom-deps): Monorepo sub-package, consistent false positive pattern for tscircuit. | ai | |
| dependencies | unvetted-dep:@tscircuit/react-fiber | AI (dependencies): First-party @tscircuit org dependency, same maintainer/ecosystem. | ai | |
| phantom-deps | phantom-dep:@tscircuit/schematic-autolayout | AI (phantom-deps): Used via config/type references, not direct import; benign for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@tscircuit/props | AI (phantom-deps): Used via config/type references, not direct import; benign for this monorepo package. | ai | |
| dependencies | unvetted-dep:@tscircuit/builder | AI (dependencies): First-party @tscircuit org dependency, same maintainer/ecosystem. | ai | |
| phantom-deps | phantom-dep:kicadts | AI (phantom-deps): Build/config-referenced dep, consistent with this package's structure across versions. | ai | |
| phantom-deps | phantom-dep:manifold-3d | AI (phantom-deps): Build/config-referenced dep, consistent with this package's structure across versions. | ai | |
| phantom-deps | phantom-dep:@lume/kiwi | AI (phantom-deps): Build/config-referenced dep, consistent with this package's structure across versions. | ai | |
| phantom-deps | phantom-dep:bpc-graph | AI (phantom-deps): Build/config-referenced dep, consistent with this package's structure across versions. | ai | |
| phantom-deps | phantom-dep:spicets | AI (phantom-deps): Build/config-referenced dep, consistent with this package's structure across versions. | ai | |
| phantom-deps | phantom-dep:poppygl | AI (phantom-deps): Build/config-referenced dep, consistent with this package's structure across versions. | ai | |
| phantom-deps | phantom-dep:spicey | AI (phantom-deps): Build/config-referenced dep, consistent with this package's structure across versions. | ai | |
| source-diff | net-exec-file:dist/webworker.min.js | AI (source-diff): Legitimate webworker bundle for tscircuit eval; consistent with documented build scripts and package structure. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase reflects bundling of many deps into browser/webworker minified artifacts; expected for this package's architecture. | ai | |
| source-diff | net-exec-file:dist/browser.min.js | AI (source-diff): Legitimate browser bundle exported via package.json exports map; code samples show React/module boilerplate, not malware. | ai | |
| phantom-deps | phantom-dep:@tscircuit/krt-wasm | AI (phantom-deps): Platform-specific binary package; legitimate implicit dependency for this monorepo. | ai | |
| source-diff | encoded-string-file:dist/webworker.min.js | AI (source-diff): Long string is SVG/CSS chart rendering code in a minified webworker bundle, not an obfuscated payload. | ai | |
| dependencies | unvetted-dep:@tscircuit/solver-utils | AI (dependencies): tscircuit first-party package; stable pattern across versions. | ai | |
| phantom-deps | phantom-dep:@rollup/plugin-commonjs | AI (phantom-deps): Build tooling; framework-scoped, loaded by convention. | ai | |
| phantom-deps | phantom-dep:@rollup/plugin-json | AI (phantom-deps): Build tooling; framework-scoped, loaded by convention. | ai | |
| phantom-deps | phantom-dep:@rollup/plugin-typescript | AI (phantom-deps): Build tooling; framework-scoped, loaded by convention. | ai | |
| phantom-deps | phantom-dep:@rollup/plugin-node-resolve | AI (phantom-deps): Build tooling; framework-scoped, loaded by convention. | ai | |
| phantom-deps | phantom-dep:@tscircuit/alphabet | AI (phantom-deps): Newly added tscircuit ecosystem dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:transformation-matrix | AI (phantom-deps): Math utility dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:svg-path-commander | AI (phantom-deps): SVG utility dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:rollup-plugin-dts | AI (phantom-deps): Build tool; stable false positive. | ai | |
| phantom-deps | phantom-dep:calculate-packing | AI (phantom-deps): Geometry dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:performance-now | AI (phantom-deps): Polyfill dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:format-si-unit | AI (phantom-deps): Utility dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:css-select | AI (phantom-deps): Transitive dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): Peer/bundled dep for browser build; stable false positive. | ai | |
| phantom-deps | phantom-dep:flatbush | AI (phantom-deps): Transitive spatial indexing dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:sucrase | AI (phantom-deps): Build-time dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:comlink | AI (phantom-deps): Used in web worker build; stable false positive. | ai | |
| phantom-deps | phantom-dep:rollup | AI (phantom-deps): Build tool referenced in config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): Known implicit TypeScript runtime dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:debug | AI (phantom-deps): Stable false positive; debug is a transitive runtime dep in this large meta-package. | ai | |
| phantom-deps | phantom-dep:@tscircuit/infgrid-ijump-astar | AI (phantom-deps): tscircuit ecosystem dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@tscircuit/circuit-json-util | AI (phantom-deps): tscircuit ecosystem dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@tscircuit/checks | AI (phantom-deps): tscircuit ecosystem dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@tscircuit/math-utils | AI (phantom-deps): tscircuit ecosystem dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@tscircuit/runframe | AI (phantom-deps): tscircuit ecosystem dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@tscircuit/soup-util | AI (phantom-deps): tscircuit ecosystem dep; stable false positive. | ai | |
| dependencies | unvetted-dep:graphics-debug | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:bpc-graph | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:poppygl | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:kicadts | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:circuit-json-to-gltf | AI (dependencies): tscircuit ecosystem dep; stable. | ai | |
| dependencies | unvetted-dep:@tscircuit/matchpack | AI (dependencies): tscircuit first-party dep; stable. | ai | |
| dependencies | unvetted-dep:circuit-json-to-bpc | AI (dependencies): tscircuit ecosystem dep; stable. | ai | |
| dependencies | unvetted-dep:@tscircuit/miniflex | AI (dependencies): tscircuit first-party dep; stable. | ai | |
| dependencies | unvetted-dep:@tscircuit/alphabet | AI (dependencies): tscircuit first-party dep; stable. | ai | |
| dependencies | unvetted-dep:connectivity-map | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:calculate-elbow | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@resvg/resvg-js | AI (dependencies): Well-known SVG rendering library; stable for this package. | ai | |
| dependencies | unvetted-dep:spicey | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:circuit-to-svg | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:jscad-planner | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:s-expression | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:minicssgrid | AI (dependencies): tscircuit ecosystem dep; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:circuit-json-to-spice | AI (dependencies): tscircuit ecosystem dep; stable. | ai | |
| dependencies | unvetted-dep:kicad-to-circuit-json | AI (dependencies): tscircuit ecosystem dep; stable. | ai | |
| dependencies | unvetted-dep:@tscircuit/footprinter | AI (dependencies): tscircuit first-party dep; stable. | ai | |
| source-diff | encoded-string-file:dist/browser.min.js | AI (source-diff): tscircuit ships a minified browser bundle; long strings in dist/browser.min.js are CSS-in-JS and UI code, not malicious payloads. This is stable for this package. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): svg-path-commander is a legitimate SVG utility; @tscircuit/alphabet is a first-party tscircuit package. Both additions are benign for this EDA library. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): Bundled meta-package pattern; react is a legitimate peer/bundled dependency for this EDA toolkit. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): tscircuit is a bundled meta-package; phantom deps are expected false positives from the tsup build pattern where deps are bundled rather than directly imported. | ai | |
| phantom-deps | phantom-dep:schematic-symbols | AI (phantom-deps): Bundled meta-package pattern; legitimate tscircuit ecosystem dependency. | ai | |
| phantom-deps | phantom-dep:circuit-json | AI (phantom-deps): Bundled meta-package pattern; all @tscircuit ecosystem deps are expected to appear as phantom deps in this umbrella package. | ai | |
| phantom-deps | phantom-dep:@tscircuit/footprinter | AI (phantom-deps): Bundled meta-package pattern; legitimate tscircuit scoped dependency. | ai | |
| phantom-deps | phantom-dep:@tscircuit/capacity-autorouter | AI (phantom-deps): Bundled meta-package pattern; legitimate tscircuit scoped dependency. | ai | |
| provenance | no-provenance | AI (provenance): tscircuit is a well-established package (1302 days, 2774 versions); lack of Sigstore provenance is not a security concern for this package. | ai |
Versions (showing 51 of 992)
| Version | Deps | Published |
|---|---|---|
| 0.0.2130 | 71 / 4 | |
| 0.0.2129 | 71 / 4 | |
| 0.0.2128 | 71 / 4 | |
| 0.0.2127 | 71 / 4 | |
| 0.0.2126 | 71 / 4 | |
| 0.0.2125 | 71 / 4 | |
| 0.0.2124 | 71 / 4 | |
| 0.0.2123 | 70 / 4 | |
| 0.0.2122 | 70 / 4 | |
| 0.0.2121 | 70 / 4 | |
| 0.0.2120 | 70 / 4 | |
| 0.0.2119 | 70 / 4 | |
| 0.0.2118 | 70 / 4 | |
| 0.0.2117 | 70 / 4 | |
| 0.0.2116 | 70 / 4 | |
| 0.0.2115 | 70 / 4 | |
| 0.0.2114 | 70 / 4 | |
| 0.0.2113 | 70 / 4 | |
| 0.0.2112 | 70 / 4 | |
| 0.0.2111 | 70 / 4 | |
| 0.0.2110 | 70 / 4 | |
| 0.0.2109 | 70 / 4 | |
| 0.0.2108 | 70 / 4 | |
| 0.0.2107 | 70 / 4 | |
| 0.0.2106 | 70 / 4 | |
| 0.0.2105 | 70 / 4 | |
| 0.0.2104 | 70 / 4 | |
| 0.0.2103 | 70 / 4 | |
| 0.0.2102 | 70 / 4 | |
| 0.0.2101 | 70 / 4 | |
| 0.0.2100 | 70 / 4 | |
| 0.0.2099 | 70 / 4 | |
| 0.0.2098 | 70 / 4 | |
| 0.0.2097 | 70 / 4 | |
| 0.0.2096 | 70 / 4 | |
| 0.0.2095 | 70 / 4 | |
| 0.0.2094 | 70 / 4 | |
| 0.0.2093 | 70 / 4 | |
| 0.0.2092 | 70 / 4 | |
| 0.0.2091 | 70 / 4 | |
| 0.0.2090 | 70 / 4 | |
| 0.0.2089 | 70 / 4 | |
| 0.0.2088 | 70 / 4 | |
| 0.0.2087 | 70 / 4 | |
| 0.0.2086 | 70 / 4 | |
| 0.0.2085 | 70 / 4 | |
| 0.0.2084 | 70 / 4 | |
| 0.0.2083 | 70 / 4 | |
| 0.0.2082 | 70 / 4 | |
| 0.0.2081 | 70 / 4 | |
| 0.0.2080 | 70 / 4 |
v0.0.2130
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2129
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2128
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2127
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2126
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2125
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2124
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2123
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2122
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2121
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2120
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2119
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2118
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2117
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2116
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2115
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2114
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2113
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2112
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2111
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2110
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2109
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2108
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2107
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2106
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2105
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2104
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2103
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2102
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2101
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2100
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2099
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2098
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2097
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2096
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2095
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2094
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2093
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2092
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2091
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2090
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2089
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2088
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2087
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2086
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2085
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2084
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2083
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2082
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2081
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.0.2080
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.