@google-cloud/storage
Cloud Storage Client Library for Node.js
93
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
google-wombot
Keywords
google apis clientgoogle api clientgoogle apisgoogle apigooglegoogle cloud platformgoogle cloudcloudgoogle storagestorage
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): fast-xml-parser is a well-established XML parsing library; its addition to a GCS client for XML API handling is legitimate and not a supply-chain risk. | ai | |
| source-diff | obfuscated-file:build/cjs/src/crc32c.d.ts | AI (source-diff): The long line is a CRC32C lookup table constant array in a TypeScript declaration file, ported from Google's own crc32c C++ implementation. Not obfuscation — a legitimate cryptographic constant. | ai | |
| source-diff | obfuscated-file:build/esm/src/crc32c.d.ts | AI (source-diff): Same CRC32C lookup table as the CJS variant — ESM build output of the same legitimate constant array. Not obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New files are dual CJS/ESM build outputs introduced in this version's module format refactor. Consistent with the new compile:cjs/compile:esm scripts in package.json. | ai | |
| provenance | no-provenance | AI (provenance): Official Google Cloud library published via google-wombot automation; lack of Sigstore attestation is a process gap, not a security risk for this well-established package. | ai |
Versions (showing 93 of 193)
| Version | Deps | Published |
|---|---|---|
| 5.11.1 | 20 / 38 | |
| 5.11.0 | 20 / 38 | |
| 5.10.0 | 20 / 38 | |
| 5.9.0 | 20 / 38 | |
| 5.8.5 | 21 / 40 | |
| 5.8.4 | 21 / 40 | |
| 5.8.3 | 21 / 41 | |
| 5.8.2 | 21 / 41 | |
| 5.8.1 | 21 / 41 | |
| 5.8.0 | 21 / 41 | |
| 5.7.4 | 21 / 41 | |
| 5.7.3 | 21 / 41 | |
| 5.7.2 | 20 / 40 | |
| 5.7.1 | 20 / 40 | |
| 5.7.0 | 20 / 40 | |
| 5.6.0 | 20 / 40 | |
| 5.5.1 | 20 / 40 | |
| 5.5.0 | 20 / 40 | |
| 5.4.0 | 20 / 40 | |
| 5.3.0 | 20 / 40 | |
| 5.2.0 | 20 / 40 | |
| 5.1.2 | 22 / 39 | |
| 5.1.1 | 22 / 39 | |
| 5.1.0 | 22 / 39 | |
| 5.0.1 | 22 / 39 | |
| 5.0.0 | 22 / 39 | |
| 4.7.2 | 22 / 44 | |
| 4.7.0 | 22 / 44 | |
| 4.6.0 | 22 / 43 | |
| 4.5.0 | 22 / 43 | |
| 4.4.0 | 22 / 43 | |
| 4.3.2 | 22 / 43 | |
| 4.3.1 | 22 / 46 | |
| 4.3.0 | 22 / 46 | |
| 4.2.0 | 22 / 46 | |
| 4.1.3 | 22 / 46 | |
| 4.1.2 | 22 / 46 | |
| 4.1.1 | 22 / 45 | |
| 4.1.0 | 22 / 45 | |
| 4.0.1 | 22 / 45 | |
| 4.0.0 | 22 / 45 | |
| 3.5.0 | 22 / 45 | |
| 3.4.0 | 22 / 45 | |
| 3.3.1 | 22 / 45 | |
| 3.3.0 | 22 / 45 | |
| 3.2.1 | 21 / 45 | |
| 3.2.0 | 21 / 45 | |
| 3.1.0 | 21 / 45 | |
| 3.0.4 | 21 / 42 | |
| 3.0.3 | 21 / 42 | |
| 3.0.2 | 21 / 44 | |
| 3.0.1 | 21 / 44 | |
| 3.0.0 | 20 / 45 | |
| 2.5.0 | 21 / 45 | |
| 2.4.3 | 20 / 43 | |
| 2.4.2 | 20 / 42 | |
| 2.4.1 | 20 / 42 | |
| 2.4.0 | 20 / 42 | |
| 2.3.4 | 20 / 42 | |
| 2.3.3 | 20 / 42 | |
| 2.3.1 | 20 / 42 | |
| 2.3.0 | 20 / 42 | |
| 2.2.0 | 20 / 42 | |
| 2.1.0 | 21 / 41 | |
| 2.0.3 | 21 / 39 | |
| 2.0.2 | 21 / 39 | |
| 2.0.1 | 21 / 39 | |
| 2.0.0 | 22 / 43 | |
| 1.7.0 | 21 / 21 | |
| 1.6.0 | 21 / 21 | |
| 1.5.2 | 19 / 21 | |
| 1.5.1 | 19 / 21 | |
| 1.5.0 | 19 / 21 | |
| 1.4.0 | 18 / 22 | |
| 1.3.1 | 17 / 21 | |
| 1.3.0 | 17 / 21 | |
| 1.2.1 | 16 / 8 | |
| 1.2.0 | 16 / 8 | |
| 1.1.1 | 16 / 8 | |
| 1.1.0 | 16 / 8 | |
| 1.0.0 | 16 / 8 | |
| 0.8.0 | 16 / 8 | |
| 0.7.0 | 16 / 8 | |
| 0.6.1 | 16 / 8 | |
| 0.6.0 | 16 / 8 | |
| 0.5.2 | 16 / 8 | |
| 0.5.1 | 16 / 8 | |
| 0.5.0 | 16 / 8 | |
| 0.4.0 | 16 / 8 | |
| 0.3.0 | 16 / 8 | |
| 0.2.0 | 16 / 8 | |
| 0.1.1 | 16 / 8 | |
| 0.1.0 | 16 / 8 |