Is @runstamp/provenance safe to use?

@runstamp/provenance has no known vulnerabilities on the latest version (2.0.4). DepScope rates its health at 55/100 (high risk).

What is the latest version of @runstamp/provenance?

The latest version of @runstamp/provenance is 2.0.4, released 2026-09-14.

Does @runstamp/provenance have known vulnerabilities?

No known vulnerabilities on the latest version of @runstamp/provenance.

Is @runstamp/provenance deprecated?

No, @runstamp/provenance is actively maintained. Latest release: 2.0.4 (2026-09-14).

What are alternatives to @runstamp/provenance?

Popular alternatives to @runstamp/provenance in npm include: ?, semver, debug, minimatch.

What license does @runstamp/provenance use?

@runstamp/provenance is licensed under Apache-2.0.

@runstamp/provenance

npmv2.0.4

Canonical, tenant-bound provenance manifests for Runstamp artifacts.

License Apache-2.0permissive4 versions1 maintainers4 deps

runstamp/runstamp

/ 100

Health

use with caution

@runstamp/[email protected] low health (55/100) — consider alternatives

Moderate health score (55/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

zod @runstamp/contract @runstamp/ops-bridge @runstamp/extension-kit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@runstamp/provenance

@runstamp/provenance

npmv2.0.4

Canonical, tenant-bound provenance manifests for Runstamp artifacts.

License Apache-2.0permissive4 versions1 maintainers4 deps

runstamp/runstamp

/ 100

Health

use with caution

@runstamp/[email protected] low health (55/100) — consider alternatives

Moderate health score (55/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

zod @runstamp/contract @runstamp/ops-bridge @runstamp/extension-kit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@runstamp/provenance