@kullailabs/mcop-core v0.2.0
Immutable
release. Only release title and notes can be modified.
@kullailabs/mcop-core v0.2.0
Library release that ships alongside MCOP Framework v2.2.1 (the canonical SBOM-anchor release for the v2.2.0 cycle).
- npm: https://www.npmjs.com/package/@kullailabs/mcop-core/v/0.2.0
- Framework SBOM-anchor release notes: v2.2.1
- Original feature notes: v2.2.0 (in-repo; the GitHub Release page for
v2.2.0was deleted during the SBOM-attachment recovery and the tag is permanently locked by Immutable Releases).
Provenance & SBOMs
The 0.2.0 artefact on the npm registry was published manually from a maintainer environment to unblock the v2.2.0 release cycle while the workflow's Node-version skew was being diagnosed (see PR #567). As a result, 0.2.0 does not carry a Sigstore provenance attestation and SBOMs are not attached to this Release.
For canonical CycloneDX 1.7 SBOMs covering the same source tree, see the v2.2.1 Release:
mcop-core.cdx.json(this package, 6 components)mcop-framework.cdx.json(full framework, 1,122 components)
Future releases (0.2.1+, 0.3.0, etc.) will publish via npm Trusted Publishing (OIDC) with automatic Sigstore provenance and SBOMs attached at the publish step — the publish workflow has been corrected on main.