@cortexkit/opencode-magic-context
OpenCode plugin for Magic Context — cross-session memory and context management
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:quickjs-emscripten | AI (phantom-deps): Used as a peer/type dependency referenced in config; phantom-dep heuristic false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/features/magic-context/dreamer/classify-prompt.d.ts | AI (source-diff): Long lines are LLM system prompt string literals in a .d.ts file, not obfuscated executable code. | ai | |
| source-diff | obfuscated-file:dist/hooks/magic-context/historian-prompt.generated.d.ts | AI (source-diff): Long lines are LLM system prompt string literals in a generated .d.ts file, not obfuscated executable code. | ai | |
| phantom-deps | phantom-dep:@huggingface/transformers | AI (phantom-deps): Explicitly externalized in build script; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:@jitl/quickjs-singlefile-cjs-release-asyncify | AI (phantom-deps): QuickJS variant loaded dynamically/via config; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:ai-tokenizer | AI (phantom-deps): Likely loaded conditionally or via plugin interface; stable false positive for this package. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Localhost 127.0.0.1 RPC client pattern; not exfiltration, stable for this plugin package. | ai |
Versions (showing 51 of 123)
| Version | Deps | Published |
|---|---|---|
| 0.32.4 | 12 / 6 | |
| 0.32.3 | 12 / 6 | |
| 0.32.2 | 12 / 6 | |
| 0.32.1 | 12 / 6 | |
| 0.32.0 | 11 / 6 | |
| 0.31.5 | 11 / 6 | |
| 0.31.4 | 11 / 6 | |
| 0.31.3 | 11 / 6 | |
| 0.31.2 | 11 / 6 | |
| 0.31.1 | 8 / 9 | |
| 0.31.0 | 11 / 6 | |
| 0.30.7 | 11 / 6 | |
| 0.30.6 | 11 / 6 | |
| 0.30.5 | 11 / 6 | |
| 0.30.4 | 11 / 6 | |
| 0.30.3 | 11 / 6 | |
| 0.30.2 | 11 / 6 | |
| 0.30.1 | 11 / 6 | |
| 0.30.0 | 11 / 6 | |
| 0.29.1 | 11 / 6 | |
| 0.29.0 | 11 / 6 | |
| 0.28.0 | 11 / 6 | |
| 0.27.3 | 11 / 6 | |
| 0.27.2 | 11 / 6 | |
| 0.27.1 | 8 / 6 | |
| 0.27.0 | 8 / 6 | |
| 0.26.0 | 6 / 6 | |
| 0.25.0 | 6 / 6 | |
| 0.24.1 | 6 / 6 | |
| 0.24.0 | 6 / 6 | |
| 0.23.1 | 6 / 6 | |
| 0.23.0 | 6 / 6 | |
| 0.22.5 | 6 / 5 | |
| 0.22.4 | 6 / 5 | |
| 0.22.3 | 6 / 5 | |
| 0.22.2 | 6 / 5 | |
| 0.22.1 | 6 / 5 | |
| 0.22.0 | 6 / 5 | |
| 0.21.8 | 8 / 5 | |
| 0.21.7 | 8 / 5 | |
| 0.21.6 | 8 / 5 | |
| 0.21.5 | 8 / 5 | |
| 0.21.4 | 8 / 5 | |
| 0.21.2 | 8 / 5 | |
| 0.21.1 | 8 / 5 | |
| 0.21.0 | 8 / 5 | |
| 0.20.0 | 8 / 5 | |
| 0.19.0 | 8 / 5 | |
| 0.18.0 | 8 / 5 | |
| 0.17.2 | 8 / 5 | |
| 0.17.1 | 8 / 5 |
v0.32.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.32.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.32.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.32.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.32.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.31.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.31.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.31.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.31.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.31.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.31.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.30.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.30.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.30.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.30.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.30.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.30.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.30.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.30.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.29.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.