@agentage/cli
Agentage CLI and daemon — control plane for AI agents
19
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
vreshch
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@agentage/platform | AI (phantom-deps): Same-org scoped package (@agentage/*); declared as a dependency for transitive/peer use. Not a security concern for this package. | ai | |
| phantom-deps | phantom-dep:@supabase/supabase-js | AI (phantom-deps): Referenced in config files but not directly imported; legitimate dependency declaration pattern for this CLI tool. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @agentage/cli is an AI agent CLI tool with no functional or naming resemblance to the joi validation library. Levenshtein match is a mechanical false positive. | ai |
Versions (showing 19 of 19)
| Version | Deps | Published |
|---|---|---|
| 0.22.0 | 13 / 14 | |
| 0.20.3 | 12 / 13 | |
| 0.20.2 | 12 / 13 | |
| 0.20.1 | 12 / 13 | |
| 0.20.0 | 12 / 13 | |
| 0.15.0 | 11 / 13 | |
| 0.14.3 | 10 / 13 | |
| 0.14.1 | 10 / 13 | |
| 0.13.1 | 10 / 13 | |
| 0.12.3 | 10 / 12 | |
| 0.12.0 | 10 / 12 | |
| 0.10.0 | 10 / 12 | |
| 0.9.0 | 10 / 12 | |
| 0.8.0 | 10 / 12 | |
| 0.7.1 | 10 / 12 | |
| 0.7.0 | 10 / 12 | |
| 0.1.19 | 9 / 11 | |
| 0.0.3 | 3 / 12 | |
| 0.0.2 | 3 / 12 |
v0.0.3
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.