@execbox/isolated-vm
isolated-vm executor for the execbox core package.
7
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
aallam
Keywords
mcpmodel-context-protocolisolated-vmsandboxcode-execution
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI publishing with SLSA attestation; repo URL still points to original author aallam/execbox. | ai | |
| dependencies | unvetted-dep:@execbox/core | AI (dependencies): Sibling package from the same monorepo (github.com/aallam/execbox); unvetted status is expected for co-published packages. | ai |