Skip to content

v0.1.1

Choose a tag to compare

View all tags
@codeonym codeonym released this 13 Nov 01:45
v0.1.1
79837ca
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.1.1 (2026-11-13)

Bug Fixes

  • isolate npm registry consumer from checkout (#9) (#18) (aba28ff)

Distribution status

flow-reel@0.1.1 is published through npm trusted publishing with SLSA provenance. Its provenance subject digest matches the exact retained release tarball.

npm install --save-dev flow-reel@0.1.1
docker pull ghcr.io/codeonym-oss/flow-reel:0.1.1

Public amd64/arm64 image: ghcr.io/codeonym-oss/flow-reel@sha256:1093c592104e5978e32bf4ce1ee04e82539c6b1019fb7cfb1472664dd725f683.

Retained package SHA-256: 0fde2974733aa610ae4fefa47fc195d163222f8e0418f13cdec40cabd1059fd3.

Recovery 43350829348 verifies the original artifacts from release run 43347198999: both native media suites, immutable manifest, anonymous packed consumers, matching npm integrity and narrated registry-installed consumers on both architectures passed. An npm path correction was needed before publication; npm processing delay required resuming the post-publication check. No published tag or artifact was replaced.

OIDC publication succeeded through the configured manual publish.yml publisher. The normal release caller is also configured; this recovery is evidence of the manual identity. Same-platform reproducibility checks do not promise identical WAV or MP4 bytes across architectures.

Assets 2
Loading