← Home

@assistant-ui/core

npm Repository Homepage

Framework-agnostic core runtime for assistant-ui

36
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

yonomagentbase-bot

Keywords

assistantaichatruntimeframework-agnostic

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from personal account (yonom) to GitHub Actions CI/CD publishing with SLSA provenance; legitimate and expected for this project. ai
provenance missing-githead AI (provenance): Side effect of GitHub Actions publishing; SLSA provenance attestation provides stronger commit-linkage than gitHead. ai
typosquat typosquat.levenshtein:cors AI (typosquat): @assistant-ui/core is a scoped package in the assistant-ui framework namespace, not a typosquat of 'cors'. The name similarity is purely coincidental — 'core' vs 'cors' within a completely different scoped namespace. ai

Versions (showing 36 of 36)

Version Deps Published
0.2.22 2 / 12
0.2.21 2 / 12
0.2.20 2 / 9
0.2.19 2 / 9
0.2.18 2 / 9
0.2.17 2 / 9
0.2.16 2 / 9
0.2.15 2 / 9
0.2.14 2 / 9
0.2.12 2 / 9
0.2.11 2 / 9
0.2.10 2 / 8
0.2.9 2 / 8
0.2.8 2 / 8
0.2.7 2 / 8
0.2.6 2 / 8
0.2.5 2 / 8
0.2.4 2 / 8
0.2.3 2 / 8
0.2.0 2 / 8
0.1.17 2 / 8
0.1.16 2 / 8
0.1.15 2 / 8
0.1.14 2 / 8
0.1.13 2 / 8
0.1.12 2 / 8
0.1.11 2 / 8
0.1.10 2 / 8
0.1.9 2 / 8
0.1.8 2 / 8
0.1.7 2 / 8
0.1.5 2 / 8
0.1.3 2 / 8
0.1.2 2 / 7
0.1.1 2 / 7
0.1.0 3 / 2

v0.2.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.