← Home

@ai-sdk/mcp

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

vercel-release-botmatheussmatt.straka

Keywords

aimcp

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Vercel AI SDK migrated publishing to GitHub Actions CI with SLSA attestation; this is a documented infra change, not a compromise. ai
typosquat typosquat.levenshtein:yup AI (typosquat): False positive: @ai-sdk/mcp is a scoped Vercel AI SDK package with no relation to the 'yup' validation library. The Levenshtein match is coincidental. ai

Versions (showing 100 of 108)

Version Deps Published
2.0.18 3 / 7
2.0.17 3 / 7
2.0.16 3 / 7
2.0.15 3 / 7
2.0.14 3 / 7
2.0.13 3 / 7
2.0.12 3 / 7
2.0.10 3 / 7
2.0.9 3 / 7
2.0.8 3 / 7
2.0.7 3 / 7
2.0.6 3 / 7
2.0.5 3 / 7
2.0.4 3 / 7
2.0.3 3 / 7
2.0.2 3 / 7
2.0.1 3 / 7
2.0.0 3 / 7
1.0.64 3 / 7
1.0.63 3 / 7
1.0.62 3 / 7
1.0.61 3 / 7
1.0.60 3 / 7
1.0.59 3 / 7
1.0.58 3 / 7
1.0.57 3 / 7
1.0.56 3 / 7
1.0.55 3 / 7
1.0.54 3 / 7
1.0.53 3 / 7
1.0.52 3 / 7
1.0.51 3 / 7
1.0.50 3 / 7
1.0.49 3 / 7
1.0.48 3 / 7
1.0.47 3 / 7
1.0.46 3 / 7
1.0.45 3 / 7
1.0.44 3 / 7
1.0.43 3 / 7
1.0.42 3 / 7
1.0.41 3 / 7
1.0.40 3 / 7
1.0.39 3 / 7
1.0.38 3 / 7
1.0.37 3 / 7
1.0.36 3 / 7
1.0.35 3 / 7
1.0.34 3 / 7
1.0.33 3 / 7
1.0.32 3 / 7
1.0.31 3 / 7
1.0.30 3 / 7
1.0.29 3 / 7
1.0.28 3 / 7
1.0.27 3 / 7
1.0.26 3 / 7
1.0.25 3 / 7
1.0.24 3 / 7
1.0.23 3 / 7
1.0.22 3 / 7
1.0.21 3 / 7
1.0.20 3 / 7
1.0.19 3 / 7
1.0.18 3 / 7
1.0.17 3 / 7
1.0.16 3 / 7
1.0.15 3 / 7
1.0.14 3 / 7
1.0.13 3 / 7
1.0.12 3 / 7
1.0.11 3 / 7
1.0.10 3 / 7
1.0.9 3 / 7
1.0.8 3 / 7
1.0.7 3 / 7
1.0.6 3 / 7
1.0.5 3 / 7
1.0.4 3 / 7
1.0.3 3 / 7
1.0.2 3 / 7
1.0.1 3 / 7
1.0.0 3 / 7
0.0.26 3 / 7
0.0.25 3 / 7
0.0.24 3 / 7
0.0.23 3 / 7
0.0.22 3 / 7
0.0.21 3 / 7
0.0.20 3 / 7
0.0.19 3 / 7
0.0.18 3 / 7
0.0.17 3 / 7
0.0.16 3 / 7
0.0.15 3 / 7
0.0.14 3 / 7
0.0.13 3 / 7
0.0.12 3 / 7
0.0.11 3 / 7
0.0.10 3 / 6
Showing 100 of 108 Next page →

v2.0.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.64

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.63

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.62

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.61

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.60

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.59

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.58

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.57

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.56

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.0.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.