RepoMesh

Syntropic repo network — public trust index

Home / Browse / mcp-tool-shop-org/shipcheck / 1.0.3

mcp-tool-shop-org/shipcheck @ 1.0.3

PARTIAL Integrity 60/100 Assurance 50/100
PARTIAL (integrity 60/100) — failed: sbom.present, provenance.present
2026-02-28T04:31:26.173Z · commit c6267db5d447

What this proves

This release was checked along a chain of independent steps. Each step below is a separate, verifiable claim — you can re-run the whole chain yourself with the command at the bottom.

pass 1. Signature
Signature verified against mcp-tool-shop (ci-shipcheck-2026)
fail 2. Attestations
sbom.present: fail — No SBOM attestation found in release event provenance.present: fail — No build provenance attestation found in release event license.audit: warn — SBOM missing from ReleasePublished attestations; cannot audit licenses. security.scan: warn — SBOM missing from ReleasePublished attestations; cannot run vuln scan.
CheckResultReason
sbom.presentfailNo SBOM attestation found in release event
provenance.presentfailNo build provenance attestation found in release event
license.auditwarnSBOM missing from ReleasePublished attestations; cannot audit licenses.
security.scanwarnSBOM missing from ReleasePublished attestations; cannot run vuln scan.
pending 3. Anchor (XRPL)
Included in partition 2026-02-28 (Merkle root d9cc5dd2119c4fce…). Root committed; not yet anchored on-chain (awaiting the next XRPL anchor cycle).
Merkle root: d9cc5dd2119c4fcee417e072c3594b86b9a206e4d03a7749cf1c35dde146c78b

Verify it yourself

No clone required. Run:

npx @mcptoolshop/repomesh verify-release --repo mcp-tool-shop-org/shipcheck --version 1.0.3 --anchored

← All mcp-tool-shop-org/shipcheck releases