Nipmod

skill

apm-import-example

Show agents how to convert an APM package listing into Nipmod trust metadata.

InstallEvidenceAuditSource

Readme

What this package gives an agent

Show agents how to convert an APM package listing into Nipmod trust metadata.

The signed bundle is stored on Gitlawb, pinned by digest and checked against transparency evidence before install. Use the evidence page for the exact source, release and witness proof for this package version.

Install

Choose the safest command for the job

Install

nipmod install pkg:did:key:z6MkrLceabxgQz6wmQBMDCpbQpy5MF9BwJi7KymayosN5CRn/apm-import-example@0.1.0

Inspect first

nipmod inspect pkg:did:key:z6MkrLceabxgQz6wmQBMDCpbQpy5MF9BwJi7KymayosN5CRn/apm-import-example@0.1.0

Plan only

nipmod install --plan pkg:did:key:z6MkrLceabxgQz6wmQBMDCpbQpy5MF9BwJi7KymayosN5CRn/apm-import-example@0.1.0

Versions

Published versions

0.1.0
41f0840974f39a80b42c2aaa08f1e46506e0de49f498cdb222923f573f7795d0

Dependencies

Capability graph

No dependency metadata is published for this package version.

Trust

Verification status

Level
verified
Score
100
Artifact digest
verified
Bundle signature
verified
Source provenance
verified
Transparency
verified
Quality
100/100 Excellent

Audit

Install decision

Ready
Trust
verified/100
Quality
100/100
Permissions
quiet
Advisory
clear
nipmod inspect pkg:did:key:z6MkrLceabxgQz6wmQBMDCpbQpy5MF9BwJi7KymayosN5CRn/apm-import-example@0.1.0 --json
nipmod install --plan pkg:did:key:z6MkrLceabxgQz6wmQBMDCpbQpy5MF9BwJi7KymayosN5CRn/apm-import-example@0.1.0 --json

Advisories

Install risk

No active high or critical quarantine blocks this package version.

nipmod install apm-import-example

Provenance

Gitlawb source and proof

Canonical
pkg:did:key:z6MkrLceabxgQz6wmQBMDCpbQpy5MF9BwJi7KymayosN5CRn/apm-import-example@0.1.0
Digest
41f0840974f39a80b42c2aaa08f1e46506e0de49f498cdb222923f573f7795d0
Source tag
v0.1.0
Source commit
1d9077e315d22cfdb1a35671c708017619aa0b2a
Root
3cc66da3292900a4ac482b2c301db5c6e0a00c2461847a29fec5275da7f631cf

Agent use

Permissions and host fit

No manifest permissions

Agents should inspect first, then install only when trust score, permissions, advisories and local policy match the workspace.