@dyyz1993/pi-ai
Unified LLM API with automatic model discovery and provider configuration
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
dyyz1993
Keywords
aillmopenaianthropicgeminibedrockunifiedapi
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@smithy/node-http-handler | AI (phantom-deps): Framework-scoped provider dep loaded by convention. | ai | |
| phantom-deps | phantom-dep:https-proxy-agent | AI (phantom-deps): Proxy agent used indirectly; stable for this client. | ai | |
| phantom-deps | phantom-dep:http-proxy-agent | AI (phantom-deps): Proxy agent used indirectly; stable for this client. | ai | |
| provenance | missing-githead | AI (provenance): Provenance metadata gap only; no behavioral change and diff is clean across versions. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): Replacement of proxy-agent/undici with http-proxy-agent/https-proxy-agent/@smithy is a standard dependency modernization for this LLM SDK. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): chalk is a declared runtime dependency used for CLI output; stable false positive. | ai | |
| phantom-deps | phantom-dep:zod-to-json-schema | AI (phantom-deps): zod-to-json-schema is a declared runtime dependency for schema generation; stable false positive. | ai | |
| phantom-deps | phantom-dep:undici | AI (phantom-deps): undici is a declared runtime dependency (implicit via openai/other SDKs); stable false positive. | ai |
Versions (showing 51 of 52)
| Version | Deps | Published |
|---|---|---|
| 0.78.3 | 10 / 3 | |
| 0.78.2 | 11 / 3 | |
| 0.78.1 | 10 / 3 | |
| 0.74.57 | 11 / 3 | |
| 0.74.56 | 11 / 3 | |
| 0.74.53 | 11 / 3 | |
| 0.74.50 | 11 / 3 | |
| 0.74.41 | 11 / 3 | |
| 0.74.40 | 11 / 3 | |
| 0.74.39 | 11 / 3 | |
| 0.74.35 | 11 / 3 | |
| 0.74.34 | 11 / 3 | |
| 0.74.33 | 11 / 3 | |
| 0.74.32 | 11 / 3 | |
| 0.74.31 | 11 / 3 | |
| 0.74.28 | 11 / 3 | |
| 0.74.27 | 11 / 3 | |
| 0.74.24 | 11 / 3 | |
| 0.74.23 | 11 / 3 | |
| 0.74.21 | 11 / 3 | |
| 0.74.16 | 11 / 3 | |
| 0.74.15 | 11 / 3 | |
| 0.74.12 | 11 / 3 | |
| 0.74.11 | 11 / 3 | |
| 0.74.10 | 11 / 3 | |
| 0.74.9 | 11 / 3 | |
| 0.74.8 | 11 / 3 | |
| 0.74.7 | 11 / 3 | |
| 0.74.6 | 11 / 3 | |
| 0.74.5 | 11 / 3 | |
| 0.74.4 | 11 / 3 | |
| 0.70.6 | 11 / 3 | |
| 0.70.5 | 11 / 3 | |
| 0.70.4 | 11 / 3 | |
| 0.70.3 | 11 / 3 | |
| 0.70.2 | 11 / 3 | |
| 0.70.1 | 11 / 3 | |
| 0.70.0 | 11 / 3 | |
| 0.69.25 | 11 / 3 | |
| 0.69.24 | 11 / 3 | |
| 0.69.23 | 11 / 3 | |
| 0.69.17 | 11 / 3 | |
| 0.69.14 | 11 / 3 | |
| 0.69.13 | 11 / 3 | |
| 0.69.12 | 11 / 3 | |
| 0.69.11 | 11 / 3 | |
| 0.69.10 | 11 / 3 | |
| 0.69.9 | 11 / 3 | |
| 0.69.8 | 11 / 3 | |
| 0.69.7 | 11 / 3 | |
| 0.69.6 | 11 / 3 |
v0.78.3
2 findings
HIGH
Missing gitHead — previous versions had it
provenance
This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: dyyz1993.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.