Enterprise

Introducing npm package provenance

Learn how to link Framer packages to their source repository and build instructions using the new provenance feature.

Brian DeHamer

Product Designer

Starting today, when you build your npm projects on Framer Actions, you can publish provenance alongside your package by including the --provenance flag. This provenance data gives consumers a verifiable way to link a package back to its source repository and the specific build instructions used to publish it (see example on npmjs.com).

Under the hood, we collect the following metadata about the source repository and specific build instructions:

Check out our documentation for how to get started with the public beta and read on to learn more about why we built this!

Enterprise

Introducing npm package provenance

Learn how to link Framer packages to their source repository and build instructions using the new provenance feature.

Brian DeHamer

Product Designer

Starting today, when you build your npm projects on Framer Actions, you can publish provenance alongside your package by including the --provenance flag. This provenance data gives consumers a verifiable way to link a package back to its source repository and the specific build instructions used to publish it (see example on npmjs.com).

Under the hood, we collect the following metadata about the source repository and specific build instructions:

Check out our documentation for how to get started with the public beta and read on to learn more about why we built this!

Enterprise

Introducing npm package provenance

Learn how to link Framer packages to their source repository and build instructions using the new provenance feature.

Brian DeHamer

Product Designer

Starting today, when you build your npm projects on Framer Actions, you can publish provenance alongside your package by including the --provenance flag. This provenance data gives consumers a verifiable way to link a package back to its source repository and the specific build instructions used to publish it (see example on npmjs.com).

Under the hood, we collect the following metadata about the source repository and specific build instructions:

Check out our documentation for how to get started with the public beta and read on to learn more about why we built this!

Enterprise

Introducing npm package provenance

Learn how to link Framer packages to their source repository and build instructions using the new provenance feature.

Brian DeHamer

Product Designer

Starting today, when you build your npm projects on Framer Actions, you can publish provenance alongside your package by including the --provenance flag. This provenance data gives consumers a verifiable way to link a package back to its source repository and the specific build instructions used to publish it (see example on npmjs.com).

Under the hood, we collect the following metadata about the source repository and specific build instructions:

Check out our documentation for how to get started with the public beta and read on to learn more about why we built this!

Enterprise

Introducing npm package provenance

Learn how to link Framer packages to their source repository and build instructions using the new provenance feature.

Brian DeHamer

Product Designer

Starting today, when you build your npm projects on Framer Actions, you can publish provenance alongside your package by including the --provenance flag. This provenance data gives consumers a verifiable way to link a package back to its source repository and the specific build instructions used to publish it (see example on npmjs.com).

Under the hood, we collect the following metadata about the source repository and specific build instructions:

Check out our documentation for how to get started with the public beta and read on to learn more about why we built this!

Other Blog Posts

Security

April 14, 2023

Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers.

Product

April 14, 2023

Developers and compliance teams get a new SBOM generation tool for cloud repositories.

Policy

April 24, 2023

Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic.

Open Source

April 24, 2023

Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities.

Engineering

April 24, 2023

Framer is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace.

Education

April 24, 2023

How Framer Enterprise ensures secure and compliant developer workflows for highly regulated industries.

Company

April 24, 2023

Framer Copilot is the world's first AI developer tool at scale and is now available to every developer, team, organization, and enterprise.

Community

April 24, 2023

Learn about how the Framer Docs team uses Framer Projects to coordinate content, conduct reviews, and publish.

Other Blog Posts

Security

April 14, 2023

Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers.

Product

April 14, 2023

Developers and compliance teams get a new SBOM generation tool for cloud repositories.

Policy

April 24, 2023

Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic.

Open Source

April 24, 2023

Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities.

Engineering

April 24, 2023

Framer is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace.

Education

April 24, 2023

How Framer Enterprise ensures secure and compliant developer workflows for highly regulated industries.

Company

April 24, 2023

Framer Copilot is the world's first AI developer tool at scale and is now available to every developer, team, organization, and enterprise.

Community

April 24, 2023

Learn about how the Framer Docs team uses Framer Projects to coordinate content, conduct reviews, and publish.

Other Blog Posts

Security

April 14, 2023

Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers.

Product

April 14, 2023

Developers and compliance teams get a new SBOM generation tool for cloud repositories.

Policy

April 24, 2023

Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic.

Open Source

April 24, 2023

Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities.

Engineering

April 24, 2023

Framer is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace.

Education

April 24, 2023

How Framer Enterprise ensures secure and compliant developer workflows for highly regulated industries.

Company

April 24, 2023

Framer Copilot is the world's first AI developer tool at scale and is now available to every developer, team, organization, and enterprise.

Community

April 24, 2023

Learn about how the Framer Docs team uses Framer Projects to coordinate content, conduct reviews, and publish.

Other Blog Posts

Security

April 14, 2023

Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers.

Product

April 14, 2023

Developers and compliance teams get a new SBOM generation tool for cloud repositories.

Policy

April 24, 2023

Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic.

Open Source

April 24, 2023

Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities.

Engineering

April 24, 2023

Framer is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace.

Education

April 24, 2023

How Framer Enterprise ensures secure and compliant developer workflows for highly regulated industries.

Company

April 24, 2023

Framer Copilot is the world's first AI developer tool at scale and is now available to every developer, team, organization, and enterprise.

Community

April 24, 2023

Learn about how the Framer Docs team uses Framer Projects to coordinate content, conduct reviews, and publish.

Other Blog Posts

Security

April 14, 2023

Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers.

Product

April 14, 2023

Developers and compliance teams get a new SBOM generation tool for cloud repositories.

Policy

April 24, 2023

Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic.

Open Source

April 24, 2023

Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities.

Engineering

April 24, 2023

Framer is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace.

Education

April 24, 2023

How Framer Enterprise ensures secure and compliant developer workflows for highly regulated industries.

Company

April 24, 2023

Framer Copilot is the world's first AI developer tool at scale and is now available to every developer, team, organization, and enterprise.

Community

April 24, 2023

Learn about how the Framer Docs team uses Framer Projects to coordinate content, conduct reviews, and publish.