@dxos/plugin-search
3
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
richburdonmarik_dwittjosiahdxos-botmykola-vrmchk
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher change from dxos-bot to GitHub Actions reflects CI pipeline migration in the dxos monorepo; SLSA attestation confirms integrity. | ai | |
| phantom-deps | phantom-dep:@dxos/invariant | AI (phantom-deps): Same-org @dxos scoped dep; likely used transitively or via internal imports in the monorepo. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established DXOS monorepo plugin; sparse README is typical for internal framework packages. | ai | |
| dependencies | unvetted-dep:@dxos/util | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/effect | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/schema | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/artifact | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/assistant | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/echo-schema | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/live-object | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/plugin-deck | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/ai | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/plugin-space | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/react-client | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/app-framework | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/echo-protocol | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/plugin-client | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/react-ui-stack | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/react-ui-searchlist | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@preact-signals/safe-react | AI (dependencies): Established preact signals adapter; no known issues. | ai | |
| dependencies | unvetted-dep:@dxos/plugin-graph | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/log | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai | |
| dependencies | unvetted-dep:@dxos/echo | AI (dependencies): DXOS monorepo sibling dep; coordinated versioning is expected. | ai |