@amodalai/studio
Agent editor — draft workspace, file browser, and publish flow for amodal agents
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
amodaldev
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:etc-passwd-access | AI (semgrep): Fires in e2e test asserting path-traversal is blocked; not production credential access. | ai | |
| phantom-deps | phantom-dep:next | AI (phantom-deps): Next.js framework dependency; referenced via config and re-exported, not direct imports. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): React is a direct dependency for this UI library; phantom-dep heuristic misses config-based imports. | ai | |
| phantom-deps | phantom-dep:@codemirror/view | AI (phantom-deps): CodeMirror packages are direct dependencies; config-based usage pattern. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get used only for safe globalThis.window environment detection; not obfuscation. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): Peer dep for React app consumers; bundled not directly imported. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Fires only in a test file spawning a child process; standard test harness pattern, not a secret leak. | ai | |
| phantom-deps | phantom-dep:@tailwindcss/typography | AI (phantom-deps): Declared dep used via tailwind config; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:pg | AI (phantom-deps): pg is a declared runtime dep used via config/indirect imports; phantom-dep heuristic misfires for this package. | ai | |
| phantom-deps | phantom-dep:postcss | AI (phantom-deps): postcss is a declared dep used via config files; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tailwindcss | AI (phantom-deps): tailwindcss is a declared dep used via config files; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:autoprefixer | AI (phantom-deps): autoprefixer is a declared dep used via config files; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:react-markdown | AI (phantom-deps): react-markdown is a declared dep; phantom-dep heuristic misfires for this package. | ai |
Versions (showing 51 of 95)
| Version | Deps | Published |
|---|---|---|
| 0.3.96 | 28 / 9 | |
| 0.3.95 | 28 / 9 | |
| 0.3.94 | 28 / 9 | |
| 0.3.93 | 28 / 9 | |
| 0.3.92 | 28 / 9 | |
| 0.3.91 | 28 / 9 | |
| 0.3.90 | 28 / 9 | |
| 0.3.89 | 28 / 9 | |
| 0.3.88 | 28 / 9 | |
| 0.3.87 | 28 / 9 | |
| 0.3.86 | 28 / 9 | |
| 0.3.85 | 28 / 9 | |
| 0.3.84 | 28 / 9 | |
| 0.3.83 | 28 / 9 | |
| 0.3.82 | 28 / 9 | |
| 0.3.81 | 28 / 9 | |
| 0.3.80 | 28 / 9 | |
| 0.3.79 | 28 / 9 | |
| 0.3.78 | 28 / 9 | |
| 0.3.77 | 28 / 9 | |
| 0.3.76 | 28 / 9 | |
| 0.3.75 | 28 / 9 | |
| 0.3.74 | 28 / 9 | |
| 0.3.73 | 28 / 9 | |
| 0.3.72 | 28 / 9 | |
| 0.3.71 | 28 / 9 | |
| 0.3.70 | 28 / 9 | |
| 0.3.69 | 28 / 9 | |
| 0.3.68 | 28 / 9 | |
| 0.3.67 | 28 / 9 | |
| 0.3.66 | 28 / 9 | |
| 0.3.65 | 28 / 9 | |
| 0.3.64 | 28 / 9 | |
| 0.3.63 | 28 / 9 | |
| 0.3.62 | 28 / 9 | |
| 0.3.61 | 28 / 9 | |
| 0.3.60 | 28 / 9 | |
| 0.3.59 | 28 / 9 | |
| 0.3.58 | 28 / 9 | |
| 0.3.57 | 28 / 9 | |
| 0.3.56 | 28 / 9 | |
| 0.3.55 | 28 / 9 | |
| 0.3.54 | 28 / 9 | |
| 0.3.53 | 28 / 9 | |
| 0.3.52 | 28 / 9 | |
| 0.3.51 | 28 / 9 | |
| 0.3.50 | 28 / 9 | |
| 0.3.49 | 26 / 9 | |
| 0.3.48 | 26 / 9 | |
| 0.3.47 | 26 / 9 | |
| 0.3.46 | 26 / 9 |