← Home

yeoman-environment

npm Repository Homepage
1
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

sboudriasmischahulisesgasconmshimajoshuakgoldbergeddiemongesindresorhusaddyosmani

Keywords

developmentdevbuildtoolcliscaffoldscaffoldinggenerategeneratoryeomanapp

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:fly-import AI (dependencies): Legitimate Yeoman ecosystem utility; stable dependency for this package. ai
dependencies unvetted-dep:grouped-queue AI (dependencies): Long-standing Yeoman ecosystem dependency; no risk signal. ai
dependencies unvetted-dep:mem-fs-editor AI (dependencies): Core Yeoman file-system utility; stable for this package. ai
dependencies unvetted-dep:@yeoman/adapter AI (dependencies): First-party @yeoman scoped package; stable for this package. ai
dependencies unvetted-dep:@yeoman/transform AI (dependencies): First-party @yeoman scoped package; stable for this package. ai
dependencies unvetted-dep:@yeoman/conflicter AI (dependencies): First-party @yeoman scoped package; stable for this package. ai
dependencies unvetted-dep:which-package-manager AI (dependencies): Small utility dep; no risk signal for this package. ai

Versions (showing 1 of 1)

Version Deps Published
6.1.0 21 / 27

v6.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.