Found 1 article tagged with "slsa provenance levels"
One npm dependency pulls in 67 packages. Syft, Grype, Trivy, Cosign, OSV-Scanner, Dependency-Track, Snyk, Chainguard and Socket, with real versions and prices.