@copilotkit/runtime
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@copilotkit/channels-intelligence | AI (dependencies): Same-org first-party sibling package, not a third-party unvetted dep. | ai | |
| phantom-deps | phantom-dep:@copilotkit/channels-intelligence | AI (phantom-deps): Same org scope, used indirectly; benign. | ai | |
| dependencies | unvetted-dep:@copilotkit/channels-core | AI (dependencies): First-party CopilotKit sibling package, not an unrelated third-party dep. | ai | |
| phantom-deps | phantom-dep:@langchain/openai | AI (phantom-deps): Config-referenced dependency; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:tiktoken | AI (phantom-deps): Config-referenced dependency; stable pattern for this package. | ai | |
| dependencies | unvetted-dep:@agentwire/proto | AI (dependencies): Legit sibling protocol lib, no malicious behavior evidenced. | ai | |
| dependencies | unvetted-dep:@agentwire/core | AI (dependencies): Legit sibling protocol lib, no malicious behavior evidenced. | ai | |
| dependencies | unvetted-dep:@agentwire/encoder | AI (dependencies): Legit sibling protocol lib, no malicious behavior evidenced. | ai | |
| phantom-deps | phantom-dep:@agentwire/encoder | AI (phantom-deps): Used via config/build, not a direct import concern. | ai | |
| phantom-deps | phantom-dep:@agentwire/proto | AI (phantom-deps): Used via config/build, not a direct import concern. | ai | |
| phantom-deps | phantom-dep:@agentwire/core | AI (phantom-deps): Used via config/build, not a direct import concern. | ai | |
| dependencies | unvetted-dep:@agentwire/client | AI (dependencies): Legit sibling protocol lib, no malicious behavior evidenced. | ai | |
| provenance | regressed-provenance | AI (provenance): Manual publish by known maintainer copilotkit; no material diff, benign for this package. | ai | |
| dependencies | unvetted-dep:type-graphql | AI (dependencies): type-graphql 2.0.0-rc.1 is intentionally pinned by this package; stable pre-release dependency, not a supply-chain risk. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New dep is from the same @ag-ui/* namespace already used by this package; consistent with incremental MCP middleware additions. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): Declared dep used transitively/conditionally; stable for this package. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Fires in test file only; saving/restoring process.env for test isolation. | ai | |
| phantom-deps | phantom-dep:@segment/analytics-node | AI (phantom-deps): Analytics dep conditionally loaded; stable for this package. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publishing with SLSA provenance; stable for this package. | ai | |
| phantom-deps | phantom-dep:@types/ip | AI (phantom-deps): Type-only package, framework-scoped; stable FP for this package. | ai | |
| phantom-deps | phantom-dep:ip | AI (phantom-deps): ip is a declared runtime dep used indirectly via framework conventions; stable FP for this package. | ai | |
| phantom-deps | phantom-dep:express | AI (phantom-deps): express is a declared runtime dep used as a peer/optional integration; phantom-dep heuristic fires on config-only references. | ai | |
| phantom-deps | phantom-dep:@ag-ui/encoder | AI (phantom-deps): Declared in both dependencies and peerDependencies; phantom-dep heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:@ag-ui/proto | AI (phantom-deps): Declared in both dependencies and peerDependencies; phantom-dep heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:@ag-ui/core | AI (phantom-deps): Declared in both dependencies and peerDependencies; phantom-dep heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:partial-json | AI (phantom-deps): Declared dep in a bundled runtime; heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:@graphql-yoga/plugin-defer-stream | AI (phantom-deps): Used in GraphQL yoga integration; heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:@hono/node-server | AI (phantom-deps): Used in optional v2/hono export path; heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:@scarf/scarf | AI (phantom-deps): Scarf analytics loaded via config/postinstall hooks, not direct import; stable false positive. | ai | |
| phantom-deps | phantom-dep:class-validator | AI (phantom-deps): Used with type-graphql/class-transformer ecosystem; heuristic false positive. | ai | |
| phantom-deps | phantom-dep:ws | AI (phantom-deps): Large runtime package; ws is a transitive/peer dep used indirectly — stable false positive. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get used for typed dynamic property access in agent config iteration; standard TypeScript pattern, not obfuscation. | ai | |
| semgrep | semgrep:etc-passwd-access | AI (semgrep): Fires on a test file string literal simulating an error message, not actual /etc/passwd access. | ai |
Versions (showing 37 of 137)
| Version | Deps | Published |
|---|---|---|
| 1.4.5 | 23 / 15 | |
| 1.4.4 | 23 / 15 | |
| 1.4.3 | 23 / 15 | |
| 1.4.2 | 23 / 15 | |
| 1.4.1 | 23 / 15 | |
| 1.4.0 | 23 / 15 | |
| 1.3.15 | 21 / 15 | |
| 1.3.14 | 21 / 15 | |
| 1.3.13 | 21 / 15 | |
| 1.3.12 | 21 / 15 | |
| 1.3.11 | 21 / 14 | |
| 1.3.10 | 21 / 14 | |
| 1.3.9 | 21 / 14 | |
| 1.3.8 | 21 / 14 | |
| 1.3.7 | 21 / 14 | |
| 1.3.6 | 21 / 14 | |
| 1.3.5 | 21 / 14 | |
| 1.3.4 | 21 / 14 | |
| 1.3.3 | 21 / 14 | |
| 1.3.2 | 21 / 14 | |
| 1.3.1 | 21 / 14 | |
| 1.3.0 | 21 / 14 | |
| 1.2.1 | 20 / 14 | |
| 1.2.0 | 20 / 14 | |
| 1.1.2 | 20 / 14 | |
| 1.1.1 | 20 / 14 | |
| 1.1.0 | 20 / 14 | |
| 1.0.9 | 20 / 14 | |
| 1.0.8 | 20 / 14 | |
| 1.0.7 | 20 / 14 | |
| 1.0.6 | 20 / 14 | |
| 1.0.5 | 22 / 14 | |
| 1.0.4 | 22 / 14 | |
| 1.0.3 | 23 / 14 | |
| 1.0.2 | 23 / 14 | |
| 1.0.1 | 23 / 14 | |
| 1.0.0 | 23 / 14 |
v1.4.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.4.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.15
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.3.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.2.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.1.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.1.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.1.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.5
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.3
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.