@carbon/ai-chat
Be sure to review the [chat documentation](https://chat.carbondesignsystem.com/tag/latest/docs/documents/Overview.html).
6
Versions
Apache-2.0
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
carbon-design-systemcarbon-botalisonjosephleechasejeffreychewsstrubbergtay1orjones
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/types/serverEntry-mONw-M8N.d.ts | AI (source-diff): Bundled TypeScript declaration file with long lines; content is readable JSDoc/enum declarations, not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/types/serverEntry-8eaazD-Z.d.ts | AI (source-diff): Bundled .d.ts type declaration file with long lines from concatenated imports; not obfuscated code. | ai | |
| phantom-deps | phantom-dep:markdown-it | AI (phantom-deps): markdown-it is a legitimate runtime dep used in chat markdown rendering; phantom-dep heuristic false positive. | ai | |
| source-diff | obfuscated-file:dist/types/serverEntry-CU81SMOz.d.ts | AI (source-diff): Bundled .d.ts type declaration file; long lines are from rolled-up TypeScript types, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/types/serverEntry-CFWZAY6J.d.ts | AI (source-diff): Bundled TypeScript declaration file with long lines; not obfuscation. Stable pattern for this package's rollup-dts build output. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): IBM telemetry collection via ibmtelemetry CLI; standard pattern across Carbon packages, not malicious. | ai | |
| phantom-deps | phantom-dep:@ibm/telemetry-js | AI (phantom-deps): Used via CLI in postinstall script, not directly imported in source; stable false positive for this package. | ai |