@ai-billing/deepseek
DeepSeek provider for the AI Billing.
7
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
audrzejqosquar
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | slsa-provenance | AI (provenance): Package consistently publishes with SLSA provenance via GitHub Actions CI/CD. | ai | |
| provenance | missing-githead | AI (provenance): CI/CD pipeline switched to SLSA attestation; missing gitHead is expected in this publish flow. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): 0.0.0 is the initial monorepo publish pattern for this org; consistent across all @ai-billing/* packages. | ai | |
| dependencies | unvetted-dep:@ai-billing/core | AI (dependencies): Sibling package from the same monorepo (narevai/ai-billing); expected intra-org dependency. | ai |