Evidence record / eve
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-09-21-eve-channel-facts-npm-published-three-versions-with-no-git-tag-latest-is-0-64
Channel facts: npm published three versions with no git tag; latest is 0.64.1. For three published versions there is no tag to audit against. The minor 0.52.0 has no release notes; 0.52.2’s notes cover the gap (ahead_by=56 vs 0.51.0).
Channel: npm (no tag). Half: defect (provenance). Date: 2026-09-04.
Operator consequence: Do not pin 0.51.1, 0.52.0, or 0.52.1; there is no
tagged source to review. Do not install eve@beta.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-eve-channel-facts-npm-published-three-versions-with-no-git-tag-latest-is-0-64
Profile citations
- Eve / claim / npm-versions-without-tags
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact