{"_id":"@aenguerrand/examplepackage12","_rev":"10-e5366073a991534f2cd0610b5f61dc41","name":"@aenguerrand/examplepackage12","dist-tags":{"latest":"0.5.3"},"versions":{"0.2.0":{"name":"@aenguerrand/examplepackage12","version":"0.2.0","license":"MIT","_id":"@aenguerrand/examplepackage12@0.2.0","maintainers":[{"name":"aenguerrand","email":"oss@enguerrand.tech"}],"homepage":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps#readme","bugs":{"url":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps/issues"},"dist":{"shasum":"b9d839937ebf6bcbdfc54d89bc363c13cf4ade4c","tarball":"https://registry.npmjs.org/@aenguerrand/examplepackage12/-/examplepackage12-0.2.0.tgz","fileCount":7,"integrity":"sha512-8FSt6M3ZT2MYZg0WZe5onNxKL8IwK9XqVAgh5iBoy77o8IV5NwQzJ4OZv5dG80irU5X/e0ny3FLVDkYDkNNzvQ==","signatures":[{"sig":"MEUCIQDIIi8pi39anJFc0vGkU77HyWbYWhoAdNYYl19CTjRXawIgKADJ/BDPGm8l9/PortjTFKkDPGdZl6AaVutTDrrbabQ=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":7143},"main":"index.js","_from":"file:tmp/aenguerrand-examplepackage12-0.2.0.tgz","scripts":{"test":"echo 'Running tests...'","build":"npm pack && mkdir -p dist && mv *.tgz dist/"},"_npmUser":{"name":"aenguerrand","email":"oss@enguerrand.tech"},"_resolved":"/Users/enguerrand.allamel/Ledger/cybersec/npm-cli/tmp/aenguerrand-examplepackage12-0.2.0.tgz","_integrity":"sha512-8FSt6M3ZT2MYZg0WZe5onNxKL8IwK9XqVAgh5iBoy77o8IV5NwQzJ4OZv5dG80irU5X/e0ny3FLVDkYDkNNzvQ==","repository":{"url":"git+https://github.com/AEnguerrand/npm-publish-slsa-two-steps.git","type":"git"},"_npmVersion":"11.0.0-pre.0","description":"An example npm package for demonstration purposes.","directories":{},"_nodeVersion":"23.1.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/examplepackage12_0.2.0_1733149292648_0.32283775458164055","host":"s3://npm-registry-packages"}},"0.3.0":{"name":"@aenguerrand/examplepackage12","version":"0.3.0","license":"MIT","_id":"@aenguerrand/examplepackage12@0.3.0","maintainers":[{"name":"aenguerrand","email":"oss@enguerrand.tech"}],"homepage":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps#readme","bugs":{"url":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps/issues"},"dist":{"shasum":"45e09dd64bac6d2f36724579b9a7ae344d7328cc","tarball":"https://registry.npmjs.org/@aenguerrand/examplepackage12/-/examplepackage12-0.3.0.tgz","fileCount":9,"integrity":"sha512-dJiDsPEySUz+2f//bmT+s6w/Oyzsnkt40XOKSPvmw6rBi3OJ8BB1hb373qNm8rqy4PSIP8VS+YUGPs/8rqVhoQ==","signatures":[{"sig":"MEUCIQCTXRcY8IU2qzx0m3ol7U5+fiJARrzkgvNjS/zSa0mYGwIgGxAaVCk4Fhx9qPhOOLmjuxfVRH7XQfc3tqJKUJRG/Bs=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@aenguerrand%2fexamplepackage12@0.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"unpackedSize":8886},"main":"index.js","_from":"file:aenguerrand-examplepackage12-0.3.0.tgz","scripts":{"test":"echo 'Running tests...'","build":"npm pack && mkdir -p dist && mv *.tgz dist/"},"_npmUser":{"name":"aenguerrand","email":"oss@enguerrand.tech"},"_resolved":"/home/runner/work/npm-publish-slsa-two-steps/npm-publish-slsa-two-steps/aenguerrand-examplepackage12-0.3.0.tgz","_integrity":"sha512-dJiDsPEySUz+2f//bmT+s6w/Oyzsnkt40XOKSPvmw6rBi3OJ8BB1hb373qNm8rqy4PSIP8VS+YUGPs/8rqVhoQ==","repository":{"url":"git+https://github.com/AEnguerrand/npm-publish-slsa-two-steps.git","type":"git"},"_npmVersion":"10.8.2","description":"An example npm package for demonstration purposes.","directories":{},"_nodeVersion":"18.20.5","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/examplepackage12_0.3.0_1733151027132_0.951450462372448","host":"s3://npm-registry-packages"}},"0.4.0":{"name":"@aenguerrand/examplepackage12","version":"0.4.0","license":"MIT","_id":"@aenguerrand/examplepackage12@0.4.0","maintainers":[{"name":"aenguerrand","email":"oss@enguerrand.tech"}],"homepage":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps#readme","bugs":{"url":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps/issues"},"dist":{"shasum":"b439b7f42d278f42b51e666919b1b33ea59c3ffe","tarball":"https://registry.npmjs.org/@aenguerrand/examplepackage12/-/examplepackage12-0.4.0.tgz","fileCount":10,"integrity":"sha512-rYOBXDgUgGECOQV6A/iX44q4b5Fx7ZH1jVu/wAipZB1GkG5L8SJUSoeqXKZ6uyWWQ30qkqaBxzXtoEGHCcehlw==","signatures":[{"sig":"MEYCIQCr732l3nS4KW9OiGB6++ERYzHKRw/v55iPh7ScIvjEFAIhANqEd8SczQxEZn/m/6UlIqDVIgQZmTJbGsiz+nrxrYXJ","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@aenguerrand%2fexamplepackage12@0.4.0","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"unpackedSize":18929},"main":"index.js","_from":"file:aenguerrand-examplepackage12-0.4.0.tgz","scripts":{"test":"echo 'Running tests...'","build":"npm pack && mkdir -p dist && mv *.tgz dist/"},"_npmUser":{"name":"aenguerrand","email":"oss@enguerrand.tech"},"_resolved":"/home/runner/work/npm-publish-slsa-two-steps/npm-publish-slsa-two-steps/aenguerrand-examplepackage12-0.4.0.tgz","_integrity":"sha512-rYOBXDgUgGECOQV6A/iX44q4b5Fx7ZH1jVu/wAipZB1GkG5L8SJUSoeqXKZ6uyWWQ30qkqaBxzXtoEGHCcehlw==","repository":{"url":"git+https://github.com/AEnguerrand/npm-publish-slsa-two-steps.git","type":"git"},"_npmVersion":"10.8.2","description":"An example npm package for demonstration purposes.","directories":{},"_nodeVersion":"18.20.5","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/examplepackage12_0.4.0_1733396638996_0.9582610112127246","host":"s3://npm-registry-packages"}},"0.5.0":{"name":"@aenguerrand/examplepackage12","version":"0.5.0","license":"MIT","_id":"@aenguerrand/examplepackage12@0.5.0","maintainers":[{"name":"aenguerrand","email":"oss@enguerrand.tech"}],"homepage":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps#readme","bugs":{"url":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps/issues"},"dist":{"shasum":"0305fa7494f79c0dd4d3a4840d2eb0e5c747d9dd","tarball":"https://registry.npmjs.org/@aenguerrand/examplepackage12/-/examplepackage12-0.5.0.tgz","fileCount":10,"integrity":"sha512-eLBBn7QtZ0eTt3BO6+mK9zT2/2Lrh8+/dOX5TuWVni0XdoAkLjMnAjfbg8/EJtGt2sQL41EpMaG8iQ6ic08bXA==","signatures":[{"sig":"MEUCIQDweEYTnXc6MGWmz6+UhkRF3286cgmbobV4/rCGvPRxRgIgQylOW9QGf8YyWs9I+QFrTaMFk3Qo6ZLD6+Oqml6iJX4=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@aenguerrand%2fexamplepackage12@0.5.0","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"unpackedSize":19066},"main":"index.js","_from":"file:aenguerrand-examplepackage12-0.5.0.tgz","scripts":{"test":"echo 'Running tests...'","build":"npm pack && mkdir -p dist && mv *.tgz dist/"},"_npmUser":{"name":"aenguerrand","email":"oss@enguerrand.tech"},"_resolved":"/home/runner/work/npm-publish-slsa-two-steps/npm-publish-slsa-two-steps/aenguerrand-examplepackage12-0.5.0.tgz","_integrity":"sha512-eLBBn7QtZ0eTt3BO6+mK9zT2/2Lrh8+/dOX5TuWVni0XdoAkLjMnAjfbg8/EJtGt2sQL41EpMaG8iQ6ic08bXA==","repository":{"url":"git+https://github.com/AEnguerrand/npm-publish-slsa-two-steps.git","type":"git"},"_npmVersion":"10.8.2","description":"An example npm package for demonstration purposes.","directories":{},"_nodeVersion":"18.20.5","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/examplepackage12_0.5.0_1733402717821_0.7517199405113639","host":"s3://npm-registry-packages"}},"0.5.1":{"name":"@aenguerrand/examplepackage12","version":"0.5.1","license":"MIT","_id":"@aenguerrand/examplepackage12@0.5.1","maintainers":[{"name":"aenguerrand","email":"oss@enguerrand.tech"}],"homepage":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps#readme","bugs":{"url":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps/issues"},"dist":{"shasum":"8e93e76c7ac48bc1121b44b6498737ba206f587a","tarball":"https://registry.npmjs.org/@aenguerrand/examplepackage12/-/examplepackage12-0.5.1.tgz","fileCount":10,"integrity":"sha512-p+GkKHu4XhuAPhPZFPOYR0mtUG7Zc9wT7/8PlPjgjyRy1Vukl52EY4pfNRXNkEsUaYD7glr27YXp+bQA9Up15A==","signatures":[{"sig":"MEYCIQDswSbHVN/1EponbcGTfYo4cAvAslBt8BR4jHK27pIzugIhAPbEKjX/tYUlckUULfcybYktZ+NGY0cAVF1awDrKSWkr","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@aenguerrand%2fexamplepackage12@0.5.1","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"unpackedSize":21284},"main":"index.js","_from":"file:aenguerrand-examplepackage12-0.5.1.tgz","scripts":{"test":"echo 'Running tests...'","build":"npm pack && mkdir -p dist && mv *.tgz dist/"},"_npmUser":{"name":"aenguerrand","email":"oss@enguerrand.tech"},"_resolved":"/Users/enguerrand.allamel/Downloads/aenguerrand-examplepackage12-0.5.1.tgz","_integrity":"sha512-p+GkKHu4XhuAPhPZFPOYR0mtUG7Zc9wT7/8PlPjgjyRy1Vukl52EY4pfNRXNkEsUaYD7glr27YXp+bQA9Up15A==","repository":{"url":"git+https://github.com/AEnguerrand/npm-publish-slsa-two-steps.git","type":"git"},"_npmVersion":"11.6.0","description":"An example npm package for demonstration purposes.","directories":{},"_nodeVersion":"24.10.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/examplepackage12_0.5.1_1763400628714_0.7040412955476916","host":"s3://npm-registry-packages-npm-production"}},"0.5.2":{"name":"@aenguerrand/examplepackage12","version":"0.5.2","license":"MIT","_id":"@aenguerrand/examplepackage12@0.5.2","maintainers":[{"name":"aenguerrand","email":"oss@enguerrand.tech"}],"homepage":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps#readme","bugs":{"url":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps/issues"},"dist":{"shasum":"1ab4649d9e1e78630cd73a9fd4bf9b66373fec5e","tarball":"https://registry.npmjs.org/@aenguerrand/examplepackage12/-/examplepackage12-0.5.2.tgz","fileCount":10,"integrity":"sha512-0EWcIseqacNQ91czIV+0b8skmiP3OhpolAkKLX8vAihK2YoPhOOSsJ0n6jj48U6nXJ/s47bhNQg5yl02L5ae1w==","signatures":[{"sig":"MEQCIFqOx4/bOVb4487wGNPxBJw/+RSjYq7IAYLtA1OTyCI2AiBYRhVDekyWvw6HomVRFp5gKjq4AdLuqphFrPp8nMxhPw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@aenguerrand%2fexamplepackage12@0.5.2","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"unpackedSize":21511},"main":"index.js","_from":"file:aenguerrand-examplepackage12-0.5.2.tgz","scripts":{"test":"echo 'Running tests...'","build":"npm pack && mkdir -p dist && mv *.tgz dist/"},"_npmUser":{"name":"aenguerrand","email":"oss@enguerrand.tech"},"_resolved":"/home/runner/work/npm-publish-slsa-two-steps/npm-publish-slsa-two-steps/aenguerrand-examplepackage12-0.5.2.tgz","_integrity":"sha512-0EWcIseqacNQ91czIV+0b8skmiP3OhpolAkKLX8vAihK2YoPhOOSsJ0n6jj48U6nXJ/s47bhNQg5yl02L5ae1w==","repository":{"url":"git+https://github.com/AEnguerrand/npm-publish-slsa-two-steps.git","type":"git"},"_npmVersion":"10.8.2","description":"An example npm package for demonstration purposes.","directories":{},"_nodeVersion":"20.19.5","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/examplepackage12_0.5.2_1763482067476_0.260029597919879","host":"s3://npm-registry-packages-npm-production"}},"0.5.3":{"name":"@aenguerrand/examplepackage12","version":"0.5.3","description":"An example npm package for demonstration purposes.","main":"index.js","scripts":{"build":"npm pack && mkdir -p dist && mv *.tgz dist/","test":"echo 'Running tests...'"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/AEnguerrand/npm-publish-slsa-two-steps.git"},"_id":"@aenguerrand/examplepackage12@0.5.3","bugs":{"url":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps/issues"},"homepage":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps#readme","_integrity":"sha512-C62wHjOZkLdhuF3qGJcDU3ZAbjlxwTaCdfxyoX8USfm5pArM2BnC6t32euHzztHygNqDNB6Tx/F7b172wEEMhQ==","_resolved":"/home/runner/work/npm-publish-slsa-two-steps/npm-publish-slsa-two-steps/aenguerrand-examplepackage12-0.5.3.tgz","_from":"file:aenguerrand-examplepackage12-0.5.3.tgz","_nodeVersion":"20.19.5","_npmVersion":"10.8.2","dist":{"integrity":"sha512-C62wHjOZkLdhuF3qGJcDU3ZAbjlxwTaCdfxyoX8USfm5pArM2BnC6t32euHzztHygNqDNB6Tx/F7b172wEEMhQ==","shasum":"b37fe5f3da194930083a9063335edf8f2c653697","tarball":"https://registry.npmjs.org/@aenguerrand/examplepackage12/-/examplepackage12-0.5.3.tgz","fileCount":10,"unpackedSize":23015,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@aenguerrand%2fexamplepackage12@0.5.3","provenance":{"predicateType":"https://slsa.dev/provenance/v0.2"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQCRjzjij6kxlpQURO5N66FxzV62ggnfokcJnZe9F0HthQIhAIly+glHLPhuiCN22i+KaGtSaXok4ilnuAQWs4fbC3g4"}]},"_npmUser":{"name":"aenguerrand","email":"oss@enguerrand.tech"},"directories":{},"maintainers":[{"name":"aenguerrand","email":"oss@enguerrand.tech"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/examplepackage12_0.5.3_1763628342962_0.7845334112097071"},"_hasShrinkwrap":false}},"time":{"created":"2024-12-02T14:21:32.541Z","modified":"2025-11-20T08:45:43.617Z","0.1.0":"2024-11-28T16:03:56.180Z","0.2.0":"2024-12-02T14:21:32.814Z","0.3.0":"2024-12-02T14:50:27.304Z","0.4.0":"2024-12-05T11:03:59.179Z","0.5.0":"2024-12-05T12:45:17.990Z","0.5.1":"2025-11-17T17:30:28.911Z","0.5.2":"2025-11-18T16:07:47.678Z","0.5.3":"2025-11-20T08:45:43.155Z"},"bugs":{"url":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps/issues"},"license":"MIT","homepage":"https://github.com/AEnguerrand/npm-publish-slsa-two-steps#readme","repository":{"type":"git","url":"git+https://github.com/AEnguerrand/npm-publish-slsa-two-steps.git"},"description":"An example npm package for demonstration purposes.","maintainers":[{"name":"aenguerrand","email":"oss@enguerrand.tech"}],"readme":"# npm-publish-slsa-two-steps\n\nThis lab repository demonstrates how to create provenance without using the npm CLI and publish a package to npmjs.com with an attached provenance file (not generated by the npm CLI). This lab was conducted to ensure compatibility with changesets and the external provenance mechanism, even if the package is not directly pushed to npmjs.com.\n\nHere is a table of all GitHub workflows in this repository:\n\n| Workflow File                        | Workflow Name                    | Description                                                                           | Status |\n|--------------------------------------|----------------------------------|---------------------------------------------------------------------------------------|--------|\n| github-attest-predicate.yaml         | Github Attest - Custom Predicate | Based on `action/attest`. Attest a package with a custom predicate and publish it to npm with attached provenance. | :x: |\n| github-attest.yaml                   | Github Attest                    | Based on `action/attest`. Attest a package and publish it to npm with attached provenance.                      | :x: |\n| sigtstorejs.yaml                     | Sigstore JS                      | Workflow for integrating SigstoreJS with your project.                                  |:x: |\n| slsa-generator-nodejs-custom.yaml    | SLSA Generator Custom NodeJS     | Based on `SLSA GitHub Generator`. Generate SLSA provenance using custom logic for NodeJS projects.                      | :white_check_mark: |\n| slsa-generator-nodejs.yaml           | SLSA Generator NodeJS            | Based on `SLSA GitHub Generator`.Generate SLSA Level 3 provenance using the SLSA GitHub Generator for NodeJS. | :white_check_mark:  |\n","readmeFilename":"README.md"}