@deepagents/context
A domain-agnostic context system for LLM applications, including fragment rendering, persistence, chat orchestration, and portable sandbox tooling.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): Added dep is same-org sibling package (@deepagents/test), not a third-party supply-chain risk. | ai | |
| dependencies | unvetted-dep:@deepagents/test | AI (dependencies): Same-org first-party dependency, not an external unvetted package. | ai | |
| source-diff | obfuscated-file:dist/index.js | AI (source-diff): Same as browser.js — bundled TypeScript with source maps, fully readable content. | ai | |
| source-diff | obfuscated-file:dist/browser.js | AI (source-diff): Bundled ESM output with source maps; readable identifiers, no eval/encoding. Long lines from bundling, not obfuscation. | ai | |
| phantom-deps | phantom-dep:@ai-sdk/groq | AI (phantom-deps): Referenced in config/model definitions; phantom-dep heuristic misses indirect config usage. | ai | |
| phantom-deps | phantom-dep:@deepagents/agent | AI (phantom-deps): Same-org sibling package; likely re-exported or used indirectly. | ai | |
| phantom-deps | phantom-dep:stringcase | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this package's usage pattern. | ai | |
| phantom-deps | phantom-dep:pluralize | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this package's usage pattern. | ai | |
| phantom-deps | phantom-dep:gpt-tokenizer | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this package's usage pattern. | ai |
Versions (showing 15 of 15)
| Version | Deps | Published |
|---|---|---|
| 5.0.0 | 16 / 6 | |
| 4.3.0 | 16 / 6 | |
| 4.2.1 | 16 / 6 | |
| 4.2.0 | 17 / 6 | |
| 4.1.0 | 16 / 6 | |
| 4.0.0 | 15 / 6 | |
| 3.1.0 | 15 / 6 | |
| 3.0.1 | 15 / 6 | |
| 3.0.0 | 15 / 6 | |
| 2.4.0 | 15 / 5 | |
| 2.3.0 | 15 / 5 | |
| 2.2.0 | 15 / 5 | |
| 2.1.0 | 15 / 5 | |
| 1.0.0 | 23 / 5 | |
| 0.6.0 | 3 / 1 |
v5.0.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.2.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.2.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.