🚀 Release v0.1.13
Install from npm:
npm install -g create-claude@v0.1.13Install from GitHub Packages:
npm install -g @rmncldyo/create-claude@v0.1.13 --registry=https://npm.pkg.github.com🔐 Security & Verification
Package Signatures:
# Download verification keys
curl -O https://raw.githubusercontent.com/RMNCLDYO/create-claude/main/minisign.pub
# Verify minisign signature (recommended)
minisign -Vm create-claude-v0.1.13.tgz -p minisign.pub
# Verify GPG signature
gpg --verify create-claude-v0.1.13.tgz.asc create-claude-v0.1.13.tgzSupply Chain Attestations:
- ✅ NPM Provenance: Package published with Sigstore attestation
- ✅ SLSA Build Provenance: GitHub-generated build attestation
- ✅ Signed SBOMs: All dependency manifests cryptographically signed
📋 Software Bill of Materials (SBOM)
Multiple SBOM formats available for comprehensive dependency analysis:
| Format | File | Signatures |
|---|---|---|
| SPDX 2.3 | create-claude-v0.1.13.sbom.spdx.json |
.minisig, .asc |
| CycloneDX | create-claude-v0.1.13.sbom.cyclonedx.json |
.minisig, .asc |
| CycloneDX XML | create-claude-v0.1.13.sbom.cyclonedx.xml |
.minisig, .asc |
| Microsoft SPDX | create-claude-v0.1.13.ms-spdx.json |
.minisig, .asc |
🛡️ Security Standards Compliance
- 🎯 OpenSSF Scorecard: Optimized for maximum security score
- 🏆 SLSA Level 3: Build provenance and hermetic builds
- 📊 SSDF Compliant: Secure software development framework
- 🔍 SBOM Standards: SPDX 2.3, CycloneDX 1.5+ compatible
Full Changelog: CHANGELOG.md