← Home

@agent-assistant/inbox

npm Repository Homepage

Bounded inbox primitives for trusted external inputs

51
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

willwashburnkhaliqgant

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed from human account to GitHub Actions CI/CD bot, accompanied by a SLSA provenance attestation — this is a legitimate and recommended supply chain hardening transition for this package. ai
bogus-package bogus-package AI (bogus-package): Part of an active monorepo (@agent-assistant) with 25 published versions and SLSA provenance. Missing README polish and keywords are cosmetic, not security signals. ai
dependencies unvetted-dep:@agent-assistant/turn-context AI (dependencies): Sibling package in the same @agent-assistant scoped monorepo; internal dependency relationship is expected and consistent across the namespace. ai

Versions (showing 51 of 60)

View all versions
Version Deps Published
0.4.35 1 / 2
0.4.33 1 / 2
0.4.32 1 / 2
0.4.31 1 / 2
0.4.30 1 / 2
0.4.29 1 / 2
0.4.28 1 / 2
0.4.27 1 / 2
0.4.26 1 / 2
0.4.25 1 / 2
0.4.24 1 / 2
0.4.23 1 / 2
0.4.22 1 / 2
0.4.21 1 / 2
0.4.0 1 / 2
0.3.20 1 / 2
0.3.19 1 / 2
0.3.18 1 / 2
0.3.17 1 / 2
0.3.16 1 / 2
0.3.15 1 / 2
0.3.14 1 / 2
0.3.13 1 / 2
0.3.12 1 / 2
0.3.11 1 / 2
0.3.10 1 / 2
0.3.9 1 / 2
0.3.8 1 / 2
0.3.7 1 / 2
0.3.6 1 / 2
0.3.5 1 / 2
0.3.4 1 / 2
0.3.3 1 / 2
0.3.2 1 / 2
0.3.1 1 / 2
0.3.0 1 / 2
0.2.24 1 / 2
0.2.23 1 / 2
0.2.22 1 / 2
0.2.21 1 / 2
0.2.20 1 / 2
0.2.19 1 / 2
0.2.18 1 / 2
0.2.17 1 / 2
0.2.16 1 / 2
0.2.15 1 / 2
0.2.14 1 / 2
0.2.13 1 / 2
0.2.12 1 / 2
0.2.11 1 / 2
0.2.10 1 / 2