@vercel/go No license 22 versions

@vercel/go

npm Repository Homepage

22

Versions

—

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

matheussmatt.strakavercel-release-botzeit-bot

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
typosquat	typosquat.levenshtein:got	AI (typosquat): @vercel/go is the official Vercel Go runtime, not a typosquat of 'got'; scoped under verified @vercel org.	ai	2026/05/16
typosquat	typosquat.levenshtein:glob	AI (typosquat): Legitimate @vercel scoped package; Levenshtein match to 'glob' is coincidental.	ai	2026/05/16
typosquat	typosquat.levenshtein:koa	AI (typosquat): Legitimate @vercel scoped package; Levenshtein match to 'koa' is coincidental.	ai	2026/05/16
typosquat	typosquat.levenshtein:pg	AI (typosquat): Legitimate @vercel scoped package; Levenshtein match to 'pg' is coincidental.	ai	2026/05/16
typosquat	typosquat.levenshtein:qs	AI (typosquat): Legitimate @vercel scoped package; Levenshtein match to 'qs' is coincidental.	ai	2026/05/16
typosquat	typosquat.levenshtein:joi	AI (typosquat): Legitimate @vercel scoped package; Levenshtein match to 'joi' is coincidental.	ai	2026/05/16
typosquat	typosquat.levenshtein:zod	AI (typosquat): Legitimate @vercel scoped package; Levenshtein match to 'zod' is coincidental.	ai	2026/05/16

Versions (showing 22 of 22)

Version	Deps	Published
3.8.0	0 / 17	2026-05-26
3.7.1	0 / 17	2026-05-21
3.7.0	0 / 17	2026-05-15
3.6.0	0 / 18	2026-04-30
3.5.0	0 / 19	2026-04-13
3.4.7	0 / 19	2026-04-01
3.4.6	0 / 19	2026-03-20
3.4.5	0 / 19	2026-03-12
3.4.4	0 / 19	2026-03-10
3.4.3	0 / 19	2026-02-26
3.4.2	0 / 19	2026-02-24
3.4.1	0 / 19	2026-02-16
3.4.0	0 / 19	2026-02-06
3.3.5	0 / 19	2026-02-05
3.3.4	0 / 20	2026-01-21
3.3.3	0 / 20	2026-01-19
3.3.2	0 / 20	2026-01-16
3.3.1	0 / 20	2026-01-15
3.3.0	0 / 20	2026-01-05
3.2.4	0 / 20	2025-12-04
3.2.3	0 / 20	2025-08-05
3.2.2	0 / 20	2025-07-16

v3.8.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.7.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.7.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.5.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.7

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.6

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.5

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.4

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.3.5

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.3.4

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.3.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.3.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.3.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.3.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.2.4

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.2.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.2.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'got' typosquat

Package name '@vercel/go' is 1 edit(s) away from popular package 'got'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.