@dxos/app-graph MIT 31 versions

@dxos/app-graph

npm Repository Homepage

Constructs knowledge graphs for the purpose of building applications on top of

31

Versions

MIT

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

richburdonmarik_dwittjosiahdxos-botmykola-vrmchk

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): DXOS monorepo migrated CI publisher from dxos-bot to GitHub Actions; SLSA attestation confirms legitimate CI pipeline.	ai	2026/06/16
maintainer-change	maintainer-removed	AI (maintainer-change): Part of DXOS org CI migration; consistent with publisher change to GitHub Actions across the monorepo.	ai	2026/06/16
phantom-deps	phantom-dep:@dxos/keys	AI (phantom-deps): Same-org dep newly added to package.json; phantom-dep heuristic likely misses indirect usage in bundled output.	ai	2026/06/16
bogus-package	bogus-package	AI (bogus-package): Internal DXOS monorepo package; sparse README is expected for org-internal libs, not a spam indicator.	ai	2026/05/29
phantom-deps	phantom-dep:@dxos/live-object	AI (phantom-deps): Same-org sibling dep; phantom-dep heuristic unreliable for monorepo transitive re-exports.	ai	2026/05/29
phantom-deps	phantom-dep:@dxos/echo-signals	AI (phantom-deps): Same-org sibling dep; phantom-dep heuristic unreliable for monorepo transitive re-exports.	ai	2026/05/29

Versions (showing 31 of 31)

Version	Deps	Published
0.9.0	8 / 15	2026-06-15
0.8.3	11 / 17	2025-07-03
0.8.2	10 / 15	2025-06-17
0.8.1	10 / 11	2025-04-30
0.8.0	10 / 11	2025-03-15
0.7.4	10 / 11	2024-12-19
0.7.3	10 / 11	2024-12-16
0.7.2	9 / 11	2024-12-05
0.7.1	9 / 11	2024-11-26
0.7.0	9 / 11	2024-11-21
0.6.13	9 / 11	2024-10-22
0.6.12	9 / 11	2024-10-16
0.6.11	9 / 11	2024-09-23
0.6.10	9 / 11	2024-09-18
0.6.9	9 / 11	2024-09-06
0.6.8	9 / 11	2024-09-05
0.6.7	9 / 11	2024-08-26
0.6.6	9 / 11	2024-08-22
0.6.5	9 / 11	2024-08-12
0.6.4	9 / 11	2024-08-02
0.6.3	9 / 11	2024-07-26
0.6.2	7 / 11	2024-07-16
0.6.1	7 / 11	2024-07-11
0.6.0	7 / 11	2024-07-04
0.5.8	7 / 11	2024-06-14
0.5.7	7 / 11	2024-06-12
0.5.6	7 / 11	2024-06-11
0.5.5	7 / 11	2024-05-30
0.5.4	7 / 11	2024-05-29
0.5.3	7 / 11	2024-05-28
0.5.2	7 / 11	2024-05-17

v0.8.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.8.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.7.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.13

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.6.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.5.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.5.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.5.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.5.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.5.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.5.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.