NPMScan releases
Current version 3.1.2. Each version below is listed with the date HOL first saw it in the registry and what the catalog reported for it: supported runtimes, what it ships, its Trust Score and scan result.
Versions
3.1.2
First seen by HOL
First version HOL recorded for this plugin, so there is nothing earlier to compare.
- Runtimes
- Claude Code, Codex, Antigravity CLI, Kimi Code, MCP
- Ships
- 5 skills, 1 MCP server, 0 apps
- Trust Score
- 84 / 100
- Scan result
- No findings at scan time, 2 findings
- Attestation
- No signed release attestation published
- Source commit
- abb5d68e2aec
Release integrity
What each channel served for NPMScan the last time HOL checked. A digest is the start of the build's SHA-256 or, for a source repository, the commit's git tree hash. Different values mean different content; they do not say which one is right.
| Channel | Version | Digest | Provenance | Seen |
|---|---|---|---|---|
| Source repository (HOL scan) | 3.1.2 | 41d306a552e8 | commit abb5d68e2aec |
No integrity events recorded.
How this is recorded
HOL checks the registry once a day, so a version replaced within a day may not appear, and versions published before 24 October 2026 are not listed. The facts are what the registry reported, not a signed statement from the author. A checked release is different: the author's release workflow scanned it, checked it with the Plugin Kit and signed the result with a GitHub attestation. It does not mean the plugin is free of vulnerabilities. See how the Trust Score is computed or go back to NPMScan.