Package · npm

minipass

1 image ships it, in 2 versions. Oldest version first. Search its versions.

Every image's package set is in the report, read from verified SBOMs, so an image missing from this page doesn't ship it.

3.3.6

pkg:npm/minipass@3.3.6

ImageRepositoryPackage list read from
build-node:24ghcr.io/northcutted/clearcutt-showcase/platform/build-nodeSBOM Found, and checked against a trusted signer in the policy.
linux/amd64, linux/arm64

7.1.3

pkg:npm/minipass@7.1.3

ImageRepositoryPackage list read from
build-node:24ghcr.io/northcutted/clearcutt-showcase/platform/build-nodeSBOM Found, and checked against a trusted signer in the policy.
linux/amd64, linux/arm64

Each image's package list was read from the evidence named, for the platform images listed (its packages are their union). Verified means a trusted signer vouched for all of it; anything else means some of it wasn't verified, so the list may not be complete. Not recorded means the report doesn't say where it came from.