@cleocode/runtime
Long-running process layer for CLEO — agent polling, SSE connections, heartbeat, key rotation
100
Versions
—
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
No source commit
Maintainers
kryptobaseddev
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/gateway/index.d.ts | AI (source-diff): Long single-line TypeScript barrel re-export in .d.ts; not obfuscated code, stable pattern for this bundled package. | ai | |
| dependencies | unvetted-dep:@cleocode/core | AI (dependencies): Sibling package in the same @cleocode monorepo, published at the same version via the same CI/CD pipeline with SLSA provenance. Unvetted status is a registry artifact, not a risk signal. | ai | |
| dependencies | unvetted-dep:@cleocode/contracts | AI (dependencies): Sibling package in the same @cleocode monorepo, published at the same version via the same CI/CD pipeline with SLSA provenance. Unvetted status is a registry artifact, not a risk signal. | ai |
Versions (showing 100 of 254)
Showing 100 of 254
Next page →