Skip to content

Releases: ConceptKernel/CK.Lib.Js

v1.4.0

05 Jun 12:57
@github-actions github-actions
v1.4.0
3d625b9

Choose a tag to compare

View all tags
v1.4.0 Latest
Latest

CK.Lib.Js — latest published artifacts

One publishable surface ships from this repo: the OCI static bundle (ckp:static designation) — a CKP v3.8 JavaScript client library shipped as a Shape A filesystem-layer OCI image per SPEC.OCI.BUNDLE.v0.3. The npm package @conceptkernel/cklib is staged in package.json but not yet released. See Repo packages view for the full version history.

CK.Lib.Js OCI bundle — v1.4.0

Per PROVENANCE.md, every digest below verifies under gh attestation verify oci://… --repo ConceptKernel/CK.Lib.Js. Versions before v1.3.9 predate the attestation wiring and never appear here — re-publishing them would change digests and break the immutability promise.

docker pull ghcr.io/conceptkernel/ck-lib-js:1.4.0 → declare as a static_web (routed) or layer_sources (additive merge) entry in your bundle.yaml per SPEC.OCI.BUNDLE.v0.3. Files land at image root (/ck-client.js, /ck-page.js, /vendor/) ready for spec-standard COPY --from=cklib_source / dest/.

arch Pull URI Also tagged Digest Created (UTC)
amd64 ghcr.io/conceptkernel/ck-lib-js:1.4.0 latest sha256:f91c1f35011ac4eb112fd45b906ad01ced7508fc36c236ff1b6ba5f1227185fb 2026-06-05 12:57:58 UTC
arm64 ghcr.io/conceptkernel/ck-lib-js:1.4.0 latest sha256:7d023e5275764ca0c3527c396946c113dadb5644067229c1c0c20973f4774365 2026-06-05 12:57:58 UTC
Artifact type OCI image index (multi-arch); org.opencontainers.image.designation=ckp:static
Aggregate index ghcr.io/conceptkernel/ck-lib-js:1.4.0 (also tagged latest)
Aggregate digest sha256:5b5d06f96d207ba894fea01c341d4906f34422246c3d9cee59d3fd5557d7517d
Provenance SLSA Build Provenance v1, Sigstore-backed, pushed as OCI referrer
Built by Workflow run #27016162011
Built from commit 3d625b96dfa5dab63fd59aa4b3b1c92dee096003
Verify (CLI) gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.4.0 --repo ConceptKernel/CK.Lib.Js
Release notes https://github.com/ConceptKernel/CK.Lib.Js/releases/tag/v1.4.0
Repo packages view https://github.com/ConceptKernel/CK.Lib.Js/pkgs/container/ck-lib-js

Verifying any artifact above

# Multi-arch index (Docker's manifest negotiation picks the right arch)
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.4.0 \
  --repo ConceptKernel/CK.Lib.Js

# A specific per-arch leaf
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js@sha256:f91c1f35011ac4eb112fd45b906ad01ced7508fc36c236ff1b6ba5f1227185fb \
  --repo ConceptKernel/CK.Lib.Js

A successful verify means: signed by GitHub's Fulcio CA against the OIDC token of the v1.4.0 oci-publish workflow run, recorded in Sigstore's Rekor transparency log, subject digest matches the pulled artifact.

Use as static layer

In your bundle.yaml (per SPEC.OCI.BUNDLE.v0.3):

spec_version: 0.3
# Shape A — routed mount under a path the FastAPI/static server exposes:
static_web:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.4.0
    route: /cklib
    attestation_repo: ConceptKernel/CK.Lib.Js
# …or additive filesystem merge into the final image:
layer_sources:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.4.0
    into: /app/cklib/
    attestation_repo: ConceptKernel/CK.Lib.Js

The build MUST run gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.4.0 --repo ConceptKernel/CK.Lib.Js before the consuming image is pushed (SPEC.OCI.BUNDLE.v0.3 §4 build-time gate).

Browser consumption (after the bundle is mounted at /cklib/):

<script type="module">
  import { CKPage } from '/cklib/ck-page.js';
  await CKPage.init();
</script>

Pin policy

  • latest tracks the most recent attested CK.Lib.Js tag on the multi-arch image index. Both arches resolve transparently via Docker's manifest negotiation — no latest-amd64 / latest-arm64 split.
  • Tagged versions are immutable on GHCR. Pin by version (1.4.0) in production bundles; use latest only for development.
  • The OCI bundle is anonymous public pull — no GHCR auth required.
  • Per PROVENANCE.md Rule 2: do not consider an artifact "shipped" if its digest does not verify under gh attestation verify.

See CHANGELOG.md for what changed per version, COMPLIANCE.md for the v3.8 transport contract, README.md for the full ESM export surface.

Rendered automatically by .github/workflows/oci-publish.yml on 2026-06-05 12:57:58 UTC after gh attestation verify accepted the aggregate digest above.

Assets 2
Loading

v1.3.14

05 Jun 12:43
@github-actions github-actions
v1.3.14
932fa3d

Choose a tag to compare

View all tags
v1.3.14

CK.Lib.Js — latest published artifacts

One publishable surface ships from this repo: the OCI static bundle (ckp:static designation) — a CKP v3.8 JavaScript client library shipped as a Shape A filesystem-layer OCI image per SPEC.OCI.BUNDLE.v0.3. The npm package @conceptkernel/cklib is staged in package.json but not yet released. See Repo packages view for the full version history.

CK.Lib.Js OCI bundle — v1.3.14

Per PROVENANCE.md, every digest below verifies under gh attestation verify oci://… --repo ConceptKernel/CK.Lib.Js. Versions before v1.3.9 predate the attestation wiring and never appear here — re-publishing them would change digests and break the immutability promise.

docker pull ghcr.io/conceptkernel/ck-lib-js:1.3.14 → declare as a static_web (routed) or layer_sources (additive merge) entry in your bundle.yaml per SPEC.OCI.BUNDLE.v0.3. Files land at image root (/ck-client.js, /ck-page.js, /vendor/) ready for spec-standard COPY --from=cklib_source / dest/.

arch Pull URI Also tagged Digest Created (UTC)
amd64 ghcr.io/conceptkernel/ck-lib-js:1.3.14 latest sha256:b165bc094fa7166ef2b3d09d654f3675d562470ff8d9334d68b9590de8954ff1 2026-06-05 12:43:39 UTC
arm64 ghcr.io/conceptkernel/ck-lib-js:1.3.14 latest sha256:c3fa7d704892beeec3fb56e42fd4114a7e18188a61ac783437c7a3dbcd60ae11 2026-06-05 12:43:39 UTC
Artifact type OCI image index (multi-arch); org.opencontainers.image.designation=ckp:static
Aggregate index ghcr.io/conceptkernel/ck-lib-js:1.3.14 (also tagged latest)
Aggregate digest sha256:9bb4b5c868fc8b913c9d93dcaf622d7e1aa5dbdc67bbcb520b73f0e8e6878729
Provenance SLSA Build Provenance v1, Sigstore-backed, pushed as OCI referrer
Built by Workflow run #27015504725
Built from commit 932fa3d11f3408c768fa98b3a910951a9ca091f5
Verify (CLI) gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.14 --repo ConceptKernel/CK.Lib.Js
Release notes https://github.com/ConceptKernel/CK.Lib.Js/releases/tag/v1.3.14
Repo packages view https://github.com/ConceptKernel/CK.Lib.Js/pkgs/container/ck-lib-js

Verifying any artifact above

# Multi-arch index (Docker's manifest negotiation picks the right arch)
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.14 \
  --repo ConceptKernel/CK.Lib.Js

# A specific per-arch leaf
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js@sha256:b165bc094fa7166ef2b3d09d654f3675d562470ff8d9334d68b9590de8954ff1 \
  --repo ConceptKernel/CK.Lib.Js

A successful verify means: signed by GitHub's Fulcio CA against the OIDC token of the v1.3.14 oci-publish workflow run, recorded in Sigstore's Rekor transparency log, subject digest matches the pulled artifact.

Use as static layer

In your bundle.yaml (per SPEC.OCI.BUNDLE.v0.3):

spec_version: 0.3
# Shape A — routed mount under a path the FastAPI/static server exposes:
static_web:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.14
    route: /cklib
    attestation_repo: ConceptKernel/CK.Lib.Js
# …or additive filesystem merge into the final image:
layer_sources:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.14
    into: /app/cklib/
    attestation_repo: ConceptKernel/CK.Lib.Js

The build MUST run gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.14 --repo ConceptKernel/CK.Lib.Js before the consuming image is pushed (SPEC.OCI.BUNDLE.v0.3 §4 build-time gate).

Browser consumption (after the bundle is mounted at /cklib/):

<script type="module">
  import { CKPage } from '/cklib/ck-page.js';
  await CKPage.init();
</script>

Pin policy

  • latest tracks the most recent attested CK.Lib.Js tag on the multi-arch image index. Both arches resolve transparently via Docker's manifest negotiation — no latest-amd64 / latest-arm64 split.
  • Tagged versions are immutable on GHCR. Pin by version (1.3.14) in production bundles; use latest only for development.
  • The OCI bundle is anonymous public pull — no GHCR auth required.
  • Per PROVENANCE.md Rule 2: do not consider an artifact "shipped" if its digest does not verify under gh attestation verify.

See CHANGELOG.md for what changed per version, COMPLIANCE.md for the v3.8 transport contract, README.md for the full ESM export surface.

Rendered automatically by .github/workflows/oci-publish.yml on 2026-06-05 12:43:39 UTC after gh attestation verify accepted the aggregate digest above.

Loading

v1.3.13

04 Jun 16:37
@github-actions github-actions
v1.3.13
d819efa

Choose a tag to compare

View all tags
v1.3.13

CK.Lib.Js — latest published artifacts

One publishable surface ships from this repo: the OCI static bundle (ckp:static designation) — a CKP v3.8 JavaScript client library shipped as a Shape A filesystem-layer OCI image per SPEC.OCI.BUNDLE.v0.3. The npm package @conceptkernel/cklib is staged in package.json but not yet released — see SPEC.CK.LIB.JS.PUBLIC.v1.0. See Repo packages view for the full version history.

CK.Lib.Js OCI bundle — v1.3.13

Per PROVENANCE.md, every digest below verifies under gh attestation verify oci://… --repo ConceptKernel/CK.Lib.Js. Versions before v1.3.9 predate the attestation wiring and never appear here — re-publishing them would change digests and break the immutability promise.

docker pull ghcr.io/conceptkernel/ck-lib-js:1.3.13 → declare as a static_web (routed) or layer_sources (additive merge) entry in your bundle.yaml per SPEC.OCI.BUNDLE.v0.3. Files land at image root (/ck-client.js, /ck-page.js, /vendor/) ready for spec-standard COPY --from=cklib_source / dest/.

arch Pull URI Also tagged Digest Created (UTC)
amd64 ghcr.io/conceptkernel/ck-lib-js:1.3.13 latest sha256:b52dd99d872e302ed3d4b9e7474650c26aa084bcf9ddbbabc43e74cbb470af18 2026-06-04 16:37:08 UTC
arm64 ghcr.io/conceptkernel/ck-lib-js:1.3.13 latest sha256:28b0dae581504f103e633f50edd637d3858517a224b6a3ba73d505c3635e4fdb 2026-06-04 16:37:08 UTC
Artifact type OCI image index (multi-arch); org.opencontainers.image.designation=ckp:static
Aggregate index ghcr.io/conceptkernel/ck-lib-js:1.3.13 (also tagged latest)
Aggregate digest sha256:8634729ad019422549a763310d04fe8ba4d0e0a5c22d09729ddc4eae390888a1
Provenance SLSA Build Provenance v1, Sigstore-backed, pushed as OCI referrer
Built by Workflow run #26965540714
Built from commit d819efa2c40feae08420550d3a1aa69aa4a5e672
Verify (CLI) gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.13 --repo ConceptKernel/CK.Lib.Js
Release notes https://github.com/ConceptKernel/CK.Lib.Js/releases/tag/v1.3.13
Repo packages view https://github.com/ConceptKernel/CK.Lib.Js/pkgs/container/ck-lib-js

Verifying any artifact above

# Multi-arch index (Docker's manifest negotiation picks the right arch)
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.13 \
  --repo ConceptKernel/CK.Lib.Js

# A specific per-arch leaf
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js@sha256:b52dd99d872e302ed3d4b9e7474650c26aa084bcf9ddbbabc43e74cbb470af18 \
  --repo ConceptKernel/CK.Lib.Js

A successful verify means: signed by GitHub's Fulcio CA against the OIDC token of the v1.3.13 oci-publish workflow run, recorded in Sigstore's Rekor transparency log, subject digest matches the pulled artifact.

Use as static layer

In your bundle.yaml (per SPEC.OCI.BUNDLE.v0.3):

spec_version: 0.3
# Shape A — routed mount under a path the FastAPI/static server exposes:
static_web:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.13
    route: /cklib
    attestation_repo: ConceptKernel/CK.Lib.Js
# …or additive filesystem merge into the final image:
layer_sources:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.13
    into: /app/cklib/
    attestation_repo: ConceptKernel/CK.Lib.Js

The build MUST run gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.13 --repo ConceptKernel/CK.Lib.Js before the consuming image is pushed (SPEC.OCI.BUNDLE.v0.3 §4 build-time gate).

Browser consumption (after the bundle is mounted at /cklib/):

<script type="module">
  import { CKPage } from '/cklib/ck-page.js';
  await CKPage.init();
</script>

Pin policy

  • latest tracks the most recent attested CK.Lib.Js tag on the multi-arch image index. Both arches resolve transparently via Docker's manifest negotiation — no latest-amd64 / latest-arm64 split.
  • Tagged versions are immutable on GHCR. Pin by version (1.3.13) in production bundles; use latest only for development.
  • The OCI bundle is anonymous public pull — no GHCR auth required.
  • Per PROVENANCE.md Rule 2: do not consider an artifact "shipped" if its digest does not verify under gh attestation verify.

See CHANGELOG.md for what changed per version, COMPLIANCE.md for the v3.8 transport contract, README.md for the full ESM export surface.

Rendered automatically by .github/workflows/oci-publish.yml on 2026-06-04 16:37:08 UTC after gh attestation verify accepted the aggregate digest above.

Loading

v1.3.12

04 Jun 16:33
@github-actions github-actions
v1.3.12
7b84f8b

Choose a tag to compare

View all tags
v1.3.12

CK.Lib.Js — latest published artifacts

One publishable surface ships from this repo: the OCI static bundle (ckp:static designation) — a CKP v3.8 JavaScript client library shipped as a Shape A filesystem-layer OCI image per SPEC.OCI.BUNDLE.v0.3. The npm package @conceptkernel/cklib is staged in package.json but not yet released — see SPEC.CK.LIB.JS.PUBLIC.v1.0. See Repo packages view for the full version history.

CK.Lib.Js OCI bundle — v1.3.12

Per PROVENANCE.md, every digest below verifies under gh attestation verify oci://… --repo ConceptKernel/CK.Lib.Js. Versions before v1.3.9 predate the attestation wiring and never appear here — re-publishing them would change digests and break the immutability promise.

docker pull ghcr.io/conceptkernel/ck-lib-js:1.3.12 → declare as a static_web (routed) or layer_sources (additive merge) entry in your bundle.yaml per SPEC.OCI.BUNDLE.v0.3. Files land at image root (/ck-client.js, /ck-page.js, /vendor/) ready for spec-standard COPY --from=cklib_source / dest/.

arch Pull URI Also tagged Digest Created (UTC)
amd64 ghcr.io/conceptkernel/ck-lib-js:1.3.12 latest sha256:5aad5f7b5d2e7655cc20b702638999f03d7b935458f6ff3eef1956ffce34cae5 2026-06-04 16:33:55 UTC
arm64 ghcr.io/conceptkernel/ck-lib-js:1.3.12 latest sha256:b927f767c3c7934d93d4ec6210465f19ed7b59427c7cc66d0b9d83b45e69b2f6 2026-06-04 16:33:55 UTC
Artifact type OCI image index (multi-arch); org.opencontainers.image.designation=ckp:static
Aggregate index ghcr.io/conceptkernel/ck-lib-js:1.3.12 (also tagged latest)
Aggregate digest sha256:d990d6162b8fd2fac476da63eba0abd676510e48895f0d317c21a1781e910253
Provenance SLSA Build Provenance v1, Sigstore-backed, pushed as OCI referrer
Built by Workflow run #26965371362
Built from commit 7b84f8b51b10b12ef375d2fe8c8b89fcaa7c52f0
Verify (CLI) gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.12 --repo ConceptKernel/CK.Lib.Js
Release notes https://github.com/ConceptKernel/CK.Lib.Js/releases/tag/v1.3.12
Repo packages view https://github.com/ConceptKernel/CK.Lib.Js/pkgs/container/ck-lib-js

Verifying any artifact above

# Multi-arch index (Docker's manifest negotiation picks the right arch)
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.12 \
  --repo ConceptKernel/CK.Lib.Js

# A specific per-arch leaf
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js@sha256:5aad5f7b5d2e7655cc20b702638999f03d7b935458f6ff3eef1956ffce34cae5 \
  --repo ConceptKernel/CK.Lib.Js

A successful verify means: signed by GitHub's Fulcio CA against the OIDC token of the v1.3.12 oci-publish workflow run, recorded in Sigstore's Rekor transparency log, subject digest matches the pulled artifact.

Use as static layer

In your bundle.yaml (per SPEC.OCI.BUNDLE.v0.3):

spec_version: 0.3
# Shape A — routed mount under a path the FastAPI/static server exposes:
static_web:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.12
    route: /cklib
    attestation_repo: ConceptKernel/CK.Lib.Js
# …or additive filesystem merge into the final image:
layer_sources:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.12
    into: /app/cklib/
    attestation_repo: ConceptKernel/CK.Lib.Js

The build MUST run gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.12 --repo ConceptKernel/CK.Lib.Js before the consuming image is pushed (SPEC.OCI.BUNDLE.v0.3 §4 build-time gate).

Browser consumption (after the bundle is mounted at /cklib/):

<script type="module">
  import { CKPage } from '/cklib/ck-page.js';
  await CKPage.init();
</script>

Pin policy

  • latest tracks the most recent attested CK.Lib.Js tag on the multi-arch image index. Both arches resolve transparently via Docker's manifest negotiation — no latest-amd64 / latest-arm64 split.
  • Tagged versions are immutable on GHCR. Pin by version (1.3.12) in production bundles; use latest only for development.
  • The OCI bundle is anonymous public pull — no GHCR auth required.
  • Per PROVENANCE.md Rule 2: do not consider an artifact "shipped" if its digest does not verify under gh attestation verify.

See CHANGELOG.md for what changed per version, COMPLIANCE.md for the v3.8 transport contract, README.md for the full ESM export surface.

Rendered automatically by .github/workflows/oci-publish.yml on 2026-06-04 16:33:55 UTC after gh attestation verify accepted the aggregate digest above.

Loading

v1.3.11

29 May 03:36
@github-actions github-actions
v1.3.11
4c5a103

Choose a tag to compare

View all tags
v1.3.11

CK.Lib.Js — latest published artifacts

One publishable surface ships from this repo: the OCI static bundle (ckp:static designation) — a CKP v3.8 JavaScript client library shipped as a Shape A filesystem-layer OCI image per SPEC.OCI.BUNDLE.v0.3. The npm package @conceptkernel/cklib is staged in package.json but not yet released — see SPEC.CK.LIB.JS.PUBLIC.v1.0. See Repo packages view for the full version history.

CK.Lib.Js OCI bundle — v1.3.11

Per PROVENANCE.md, every digest below verifies under gh attestation verify oci://… --repo ConceptKernel/CK.Lib.Js. Versions before v1.3.9 predate the attestation wiring and never appear here — re-publishing them would change digests and break the immutability promise.

docker pull ghcr.io/conceptkernel/ck-lib-js:1.3.11 → declare as a static_web (routed) or layer_sources (additive merge) entry in your bundle.yaml per SPEC.OCI.BUNDLE.v0.3. Files land at image root (/ck-client.js, /ck-page.js, /vendor/) ready for spec-standard COPY --from=cklib_source / dest/.

arch Pull URI Also tagged Digest Created (UTC)
amd64 ghcr.io/conceptkernel/ck-lib-js:1.3.11 latest sha256:b42aab22cfba870ff0a862185f89924e0c3a879dce57c1f5e2b2f7677f7e106a 2026-05-29 03:36:33 UTC
arm64 ghcr.io/conceptkernel/ck-lib-js:1.3.11 latest sha256:a3f038109dafb214f72c2401b8277c2d6d6bdd3b2149c995fd6ddd60f4c55461 2026-05-29 03:36:33 UTC
Artifact type OCI image index (multi-arch); org.opencontainers.image.designation=ckp:static
Aggregate index ghcr.io/conceptkernel/ck-lib-js:1.3.11 (also tagged latest)
Aggregate digest sha256:3e6e4ab1569849005544dd6397033f479ab6ad0bc583979d1b25d56fc5301235
Provenance SLSA Build Provenance v1, Sigstore-backed, pushed as OCI referrer
Built by Workflow run #26616384495
Built from commit 4c5a103860f6100afbcd6045a6bb05c7c3a22e19
Verify (CLI) gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.11 --repo ConceptKernel/CK.Lib.Js
Release notes https://github.com/ConceptKernel/CK.Lib.Js/releases/tag/v1.3.11
Repo packages view https://github.com/ConceptKernel/CK.Lib.Js/pkgs/container/ck-lib-js

Verifying any artifact above

# Multi-arch index (Docker's manifest negotiation picks the right arch)
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.11 \
  --repo ConceptKernel/CK.Lib.Js

# A specific per-arch leaf
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js@sha256:b42aab22cfba870ff0a862185f89924e0c3a879dce57c1f5e2b2f7677f7e106a \
  --repo ConceptKernel/CK.Lib.Js

A successful verify means: signed by GitHub's Fulcio CA against the OIDC token of the v1.3.11 oci-publish workflow run, recorded in Sigstore's Rekor transparency log, subject digest matches the pulled artifact.

Use as static layer

In your bundle.yaml (per SPEC.OCI.BUNDLE.v0.3):

spec_version: 0.3
# Shape A — routed mount under a path the FastAPI/static server exposes:
static_web:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.11
    route: /cklib
    attestation_repo: ConceptKernel/CK.Lib.Js
# …or additive filesystem merge into the final image:
layer_sources:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.11
    into: /app/cklib/
    attestation_repo: ConceptKernel/CK.Lib.Js

The build MUST run gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.11 --repo ConceptKernel/CK.Lib.Js before the consuming image is pushed (SPEC.OCI.BUNDLE.v0.3 §4 build-time gate).

Browser consumption (after the bundle is mounted at /cklib/):

<script type="module">
  import { CKPage } from '/cklib/ck-page.js';
  await CKPage.init();
</script>

Pin policy

  • latest tracks the most recent attested CK.Lib.Js tag on the multi-arch image index. Both arches resolve transparently via Docker's manifest negotiation — no latest-amd64 / latest-arm64 split.
  • Tagged versions are immutable on GHCR. Pin by version (1.3.11) in production bundles; use latest only for development.
  • The OCI bundle is anonymous public pull — no GHCR auth required.
  • Per PROVENANCE.md Rule 2: do not consider an artifact "shipped" if its digest does not verify under gh attestation verify.

See CHANGELOG.md for what changed per version, COMPLIANCE.md for the v3.8 transport contract, README.md for the full ESM export surface.

Rendered automatically by .github/workflows/oci-publish.yml on 2026-05-29 03:36:33 UTC after gh attestation verify accepted the aggregate digest above.

Loading

v1.3.10

28 May 20:04
@github-actions github-actions
v1.3.10
c1e6c3c

Choose a tag to compare

View all tags
v1.3.10

CK.Lib.Js — latest published artifacts

One publishable surface ships from this repo: the OCI static bundle (ckp:static designation) — a CKP v3.8 JavaScript client library mounted as a static folder layer per SPEC.OCI.BUNDLE.v0.2. The npm package @conceptkernel/cklib is staged in package.json but not yet released — see SPEC.CK.LIB.JS.PUBLIC.v1.0. See Repo packages view for the full version history.

CK.Lib.Js OCI bundle — v1.3.10

Per PROVENANCE.md, every digest below verifies under gh attestation verify oci://… --repo ConceptKernel/CK.Lib.Js. Versions before v1.3.9 predate the attestation wiring and never appear here — re-publishing them would change digests and break the immutability promise.

docker pull ghcr.io/conceptkernel/ck-lib-js:1.3.10 → mount as static_web source in your bundle.yaml per SPEC.OCI.BUNDLE.v0.2. Files land at image root (/ck-client.js, /ck-page.js, /vendor/) ready for spec-standard COPY --from=cklib_source / dest/.

arch Pull URI Also tagged Digest Created (UTC)
amd64 ghcr.io/conceptkernel/ck-lib-js:1.3.10 latest sha256:5a196b63f357b62e7e12ccbe5e0bbb9fb24084e0af5be0f3113719594b77d18f 2026-05-28 20:04:35 UTC
arm64 ghcr.io/conceptkernel/ck-lib-js:1.3.10 latest sha256:514a6b3522ba29ab5fffa200507a6fcf0f37a583d8df06697eaa73ca85089ec8 2026-05-28 20:04:35 UTC
Artifact type OCI image index (multi-arch); org.opencontainers.image.designation=ckp:static
Aggregate index ghcr.io/conceptkernel/ck-lib-js:1.3.10 (also tagged latest)
Aggregate digest sha256:6618cd29931ece602306d3c7682756536c7744cdc35b128a62e0e30d2ed20315
Provenance SLSA Build Provenance v1, Sigstore-backed, pushed as OCI referrer
Built by Workflow run #26599092051
Built from commit c1e6c3ce8cc330d2a0b81be99ff9efcf8e6345be
Verify (CLI) gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.10 --repo ConceptKernel/CK.Lib.Js
Release notes https://github.com/ConceptKernel/CK.Lib.Js/releases/tag/v1.3.10
Repo packages view https://github.com/ConceptKernel/CK.Lib.Js/pkgs/container/ck-lib-js

Verifying any artifact above

# Multi-arch index (Docker's manifest negotiation picks the right arch)
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.10 \
  --repo ConceptKernel/CK.Lib.Js

# A specific per-arch leaf
gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js@sha256:5a196b63f357b62e7e12ccbe5e0bbb9fb24084e0af5be0f3113719594b77d18f \
  --repo ConceptKernel/CK.Lib.Js

A successful verify means: signed by GitHub's Fulcio CA against the OIDC token of the v1.3.10 oci-publish workflow run, recorded in Sigstore's Rekor transparency log, subject digest matches the pulled artifact.

Use as static layer

In your bundle.yaml (per SPEC.OCI.BUNDLE.v0.2):

spec_version: 0.2
static_web:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.10
    route: /cklib

Browser consumption (after the bundle is mounted at /cklib/):

<script type="module">
  import { CKPage } from '/cklib/ck-page.js';
  await CKPage.init();
</script>

Pin policy

  • latest tracks the most recent attested CK.Lib.Js tag on the multi-arch image index. Both arches resolve transparently via Docker's manifest negotiation — no latest-amd64 / latest-arm64 split.
  • Tagged versions are immutable on GHCR. Pin by version (1.3.10) in production bundles; use latest only for development.
  • The OCI bundle is anonymous public pull — no GHCR auth required.
  • Per PROVENANCE.md Rule 2: do not consider an artifact "shipped" if its digest does not verify under gh attestation verify.

See CHANGELOG.md for what changed per version, COMPLIANCE.md for the v3.8 transport contract, README.md for the full ESM export surface.

Rendered automatically by .github/workflows/oci-publish.yml on 2026-05-28 20:04:35 UTC after gh attestation verify accepted the aggregate digest above.

Loading

v1.3.9

28 May 18:58
@github-actions github-actions
v1.3.9
dacf8df

Choose a tag to compare

View all tags
v1.3.9

CK.Lib.Js — latest attested release

Rendered automatically by .github/workflows/oci-publish.yml on 2026-05-28 18:58:10 UTC after gh attestation verify accepted the digest below. See PROVENANCE.md for the policy.

Static OCI bundle — v1.3.9

docker pull ghcr.io/conceptkernel/ck-lib-js:1.3.9

Per-architecture digests

arch Pull URI Also tagged Digest
amd64 ghcr.io/conceptkernel/ck-lib-js:1.3.9 latest sha256:7cc93c03309563971d745b28736226cb784c352afdbe217bcb5d2b34c6a6b37d
arm64 ghcr.io/conceptkernel/ck-lib-js:1.3.9 latest sha256:c1b56a8260b8e897eb93dae43dddce60597b7fc533f8d354f2549177ff9642c3

Artifact properties
Artifact type OCI image index (multi-arch); org.opencontainers.image.designation=ckp:static
Index digest sha256:94fc5d738f8c656071937ee1d865d79d959b0eff65a80d8f3e8ff0cad4b9c8c8
Designation ckp:static

GitHub provenance (SLSA Build Provenance v1)
Workflow run https://github.com/ConceptKernel/CK.Lib.Js/actions/runs/26595692316
Built from commit dacf8df86c197045168c1fd81f819cf06fa01cd3
Tag v1.3.9
Attestation generator actions/attest-build-provenance@v1 (Sigstore-backed)
Verify locally gh attestation verify oci://ghcr.io/conceptkernel/ck-lib-js:1.3.9 --repo ConceptKernel/CK.Lib.Js

Use as static layer

In your bundle.yaml (per SPEC.OCI.BUNDLE.v0.2):

spec_version: 0.2
static_web:
  - source_image: ghcr.io/conceptkernel/ck-lib-js:1.3.9
    route: /cklib

Browser consumption (after the bundle is mounted at /cklib/):

<script type="module">
  import { CKPage } from '/cklib/ck-page.js';
  await CKPage.init();
</script>

See README.md for the full ESM export surface, CHANGELOG.md for release notes, COMPLIANCE.md for the v3.8 transport contract, PROVENANCE.md for the release policy.

Loading

v1.3.1

28 May 17:01
@styk-tv styk-tv
v1.3.1
209069e

Choose a tag to compare

View all tags
v1.3.1

Pipeline-only bump. See CHANGELOG.md §1.3.1 for context. If you see this release with an attached GHA build artifact, the pipeline is fixed.

Loading

v

04 Apr 20:37
@github-actions github-actions
v1.0.0
3b53483

Choose a tag to compare

View all tags
v

@conceptkernel/cklib v

npm install @conceptkernel/cklib

Published to npm: https://www.npmjs.com/package/@conceptkernel/cklib

Loading