← Home

@storm-software/config

100
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

stormie-botsullivanpj

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed from stormie-bot to GitHub Actions as part of a legitimate CI/CD migration; SLSA provenance attestation confirms builds are tied to the official GitHub Actions pipeline. ai
bogus-package bogus-package AI (bogus-package): Minor cosmetic signals (off-topic README, no keywords) in an 810-day-old established package with 620 versions; not indicative of spam or malicious intent. ai

Versions (showing 100 of 390)

Version Deps Published
1.135.34 1 / 1
1.135.33 1 / 1
1.135.32 1 / 1
1.135.31 1 / 1
1.135.30 1 / 1
1.135.29 1 / 1
1.135.28 1 / 1
1.135.27 1 / 1
1.135.26 1 / 1
1.135.25 1 / 1
1.135.24 1 / 1
1.135.23 1 / 1
1.135.22 1 / 1
1.135.21 1 / 1
1.135.20 1 / 1
1.135.19 1 / 1
1.135.18 1 / 1
1.135.17 1 / 1
1.135.16 1 / 1
1.135.15 1 / 1
1.135.14 1 / 1
1.135.13 1 / 1
1.135.12 1 / 1
1.135.11 1 / 1
1.135.10 1 / 1
1.135.9 1 / 1
1.135.8 1 / 1
1.135.7 1 / 1
1.135.6 1 / 1
1.135.5 1 / 1
1.135.4 1 / 1
1.135.3 1 / 1
1.135.2 1 / 1
1.135.1 1 / 1
1.135.0 1 / 1
1.134.75 1 / 1
1.134.74 1 / 1
1.134.73 1 / 1
1.134.72 1 / 1
1.134.71 1 / 1
1.134.70 1 / 1
1.134.69 1 / 1
1.134.68 1 / 1
1.134.67 1 / 1
1.134.66 1 / 1
1.134.65 1 / 1
1.134.64 1 / 1
1.134.63 1 / 1
1.134.62 1 / 1
1.134.61 1 / 1
1.134.60 1 / 1
1.134.59 1 / 1
1.134.58 1 / 1
1.134.57 1 / 1
1.134.56 1 / 1
1.134.55 1 / 1
1.134.54 1 / 1
1.134.53 1 / 1
1.134.52 1 / 1
1.134.51 1 / 1
1.134.50 1 / 1
1.134.49 1 / 1
1.134.48 1 / 1
1.134.47 1 / 1
1.134.46 1 / 1
1.134.45 1 / 1
1.134.44 1 / 1
1.134.43 1 / 1
1.134.42 1 / 1
1.134.41 1 / 1
1.134.40 1 / 1
1.134.39 1 / 1
1.134.38 1 / 1
1.134.37 1 / 1
1.134.36 1 / 1
1.134.35 1 / 1
1.134.34 1 / 1
1.134.33 1 / 1
1.134.32 1 / 1
1.134.31 1 / 1
1.134.30 1 / 1
1.134.29 1 / 1
1.134.28 1 / 1
1.134.27 1 / 1
1.134.26 1 / 1
1.134.25 1 / 1
1.134.24 1 / 1
1.134.23 1 / 1
1.134.22 1 / 1
1.134.21 1 / 1
1.134.20 1 / 1
1.134.19 1 / 1
1.134.18 1 / 1
1.134.16 1 / 1
1.134.15 1 / 1
1.134.14 1 / 1
1.134.13 1 / 1
1.134.12 1 / 1
1.134.11 1 / 1
1.134.10 1 / 1
Showing 100 of 390 Next page →

v1.134.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.134.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.