slugclub

This should be possible with the deps.dev API in the near future. We're planning to surface packages associated with a GitHub repository from the [GetProject](https://github.com/google/deps.dev/blob/dbdffb062ca83267b2d2bdee08fdd28173ea3bb2/api/v3alpha/api.proto#L56) endpoint soon. You could then...

Yep that's right. The npm attestation links are already available via the `GetVersion` endpoint (for package versions that have attestations). For example, curl 'https://api.deps.dev/v3alpha/systems/npm/packages/semver/versions/7.5.1'. The main thing we need to...

Sorry for the delayed response. From the `GetVersion` endpoint: If there is an attestation, a link to the attestation is available in the `links` field with the label `ATTESTATION`. We...