feat: VerifyNpmPackage API with supplied tuf client · slsa-framework/slsa-verifier@5845e1c

Triggered via pull request June 10, 2024 17:49

synchronize #768

Status Success

Total duration 25s

Artifacts –

depsreview.yml

on: pull_request

7 warnings

npm/autolinker has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/core-util-is has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.

npm/esprima has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/inherits has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/math-random has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.

npm/remarkable has an OpenSSF Scorecard of 2.1, which is less than this repository's threshold of 3.

npm/sprintf-js has an OpenSSF Scorecard of 2.1, which is less than this repository's threshold of 3.