← Home

@cortexkit/aft

npm Repository Homepage

Unified CLI for Agent File Tools (AFT) — setup, doctor, and diagnostics across supported agent harnesses (OpenCode, Pi)

51
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

ismeth

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff encoded-string-file:dist/index.js AI (source-diff): Encoded string is llhttp WASM base64 from bundled undici — standard pattern, not malicious. ai
source-diff source-size-tripled AI (source-diff): Size increase explained by bundling undici HTTP library; consistent with build output. ai
phantom-deps phantom-dep:@cortexkit/aft-bridge AI (phantom-deps): Same-org workspace dependency; phantom detection is a false positive for monorepo workspace packages. ai
typosquat typosquat.levenshtein:got AI (typosquat): Scoped package @cortexkit/aft is not a plausible typosquat of 'got'; edit-distance match is coincidental. ai
typosquat typosquat.levenshtein:ajv AI (typosquat): Scoped package @cortexkit/aft is not a plausible typosquat of 'ajv'; edit-distance match is coincidental. ai
phantom-deps phantom-dep:comment-json AI (phantom-deps): comment-json is a declared runtime dependency used for config file parsing; stable false positive for this package. ai

Versions (showing 51 of 88)

View all versions
Version Deps Published
0.48.1 3 / 2
0.48.0 3 / 2
0.47.3 3 / 2
0.47.2 3 / 2
0.47.1 3 / 2
0.47.0 3 / 2
0.46.0 3 / 2
0.45.1 3 / 2
0.45.0 3 / 2
0.44.0 3 / 2
0.43.1 3 / 2
0.43.0 3 / 2
0.42.0 3 / 2
0.41.0 3 / 2
0.40.3 3 / 2
0.40.2 3 / 2
0.40.1 3 / 2
0.40.0 3 / 2
0.39.4 3 / 2
0.39.3 3 / 2
0.39.2 3 / 2
0.39.1 3 / 2
0.39.0 3 / 2
0.38.0 3 / 2
0.37.2 3 / 2
0.37.1 3 / 2
0.37.0 3 / 2
0.36.1 3 / 2
0.36.0 3 / 2
0.35.4 3 / 2
0.35.3 3 / 2
0.35.2 3 / 2
0.35.1 3 / 2
0.35.0 3 / 2
0.34.0 3 / 2
0.33.0 3 / 2
0.32.0 3 / 2
0.31.1 3 / 2
0.31.0 3 / 2
0.30.3 3 / 2
0.30.2 3 / 2
0.30.1 3 / 2
0.30.0 3 / 2
0.29.1 3 / 2
0.29.0 3 / 2
0.28.2 3 / 2
0.28.1 3 / 2
0.28.0 3 / 2
0.27.1 2 / 2
0.27.0 2 / 2
0.26.4 2 / 2

v0.48.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.48.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.47.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.47.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.47.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.47.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.46.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.45.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.45.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.44.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.43.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.43.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.42.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.