← Home

@sanity/image-url

npm Repository Homepage
6
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

kmelvebjoergerexxarsskogsmaskintoninamattcraigjoneidejohnsenrubiozrobinpyonmariuslundgardsanity-ioirina937evenwradhe_sanityrbottendanielsgrovesjudofyrryanblockobliadpdcilkemadkenfredcarlsenhermanwsgulsethatombenderstipsansnorreebsanity-svc.npmrankersrdunkmichael-sanityvincentquigleyritasdiaspete-garnett-sanitykenjonespizzajosh_sanity_iocngonzalez-sanityjjburbridgetdfka_rickryanbonial-sanityindrek.karnerashsergeisarvirorefiitodrewsanitykaspar.lippmaa.sanitydamsimen.svaletbesedadaniel.malmerjordanl17colepetersarmandocernajoan_miralles_paezrealmfourchristianhgpedro-sanityjwoods-sanitybinoy14pauloborgesfaushachrislarocquesanitytnaughts1mm-sanitydennis.padiernosalexjmold-sanityjason.browntaclandworkrostimelkmdinningmattlewine.sanitymsfragalaadoprogtonysanityu269cbramdo_samhembetsongeorgedoescodemacdonsteoinsanitydashedstripesjmswrnrsnocorp_sanitymmgjfilmajgu-stavmads.mogenshojsanitytomsanity-cbsanitykevvictor.ayoguryanbethel_sanitybrianlerouxp10ekrlundjonahsnidermwrittertorbratsbergsanityevelinawahlstromjw-sanitybobinska.devoleg1357josef-sanitygabe.wyattkbrabrandannez-sanitysanityjamielaurenashpolesanitygeoffballcarsten.schwesigfishstix81

Keywords

sanitycmsheadlessrealtimecontentimage-url

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@sanity/signed-urls AI (dependencies): First-party Sanity dependency matching the package's new signed URL feature; stable for this package. ai

Versions (showing 6 of 6)

Version Deps Published
2.1.1 1 / 12
2.1.0 1 / 12
2.0.3 1 / 12
2.0.2 1 / 12
2.0.1 1 / 12
2.0.0 1 / 12

v2.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.