ClearHash · npm:left-pad@1.3.0

   ██████╗██╗     ███████╗ █████╗ ██████╗ ██╗  ██╗ █████╗ ███████╗██╗  ██╗
  ██╔════╝██║     ██╔════╝██╔══██╗██╔══██╗██║  ██║██╔══██╗██╔════╝██║  ██║
  ██║     ██║     █████╗  ███████║██████╔╝███████║███████║███████╗███████║
  ██║     ██║     ██╔══╝  ██╔══██║██╔══██╗██╔══██║██╔══██║╚════██║██╔══██║
  ╚██████╗███████╗███████╗██║  ██║██║  ██║██║  ██║██║  ██║███████║██║  ██║
   ╚═════╝╚══════╝╚══════╝╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝

supply-chain integrity verifier — rebuild every package, compare every byte, block every tamper.

==>

clearhash info · case CLH-26

classification: open · public · MIT
subject: Supply-chain integrity (npm · PyPI · Cargo)
method: rebuild ✕ compare against attested source commit
rate-limit: 30 req/min global, /inspect endpoint

==>

inspect a package

==> examples:npm:sigstore@2.3.1 npm:@sigstore/sign npm:left-pad@1.3.0

[WARN]no attestation on fileThe CLI's verify refuses to rebuild this artifact without --allow-unattested.

package	npm:left-pad@1.3.0
registry sha-256	870c0fe1096223a58d4f8832d08a7e651ea2fcadb8e6877b2fdc26b662d481dd
note	This package has no SLSA attestation. The CLI's `verify` refuses to rebuild it without `--allow-unattested`.

==> json · GET /api/inspect?package=npm:left-pad@1.3.0