@flowrag/provider-openai
9
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
zweer
Keywords
flowragragtypescriptprovideropenaiembeddingsextraction
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Monorepo package using 0.0.0 as initial placeholder; legitimate org with repo and author metadata. | ai | |
| phantom-deps | phantom-dep:openai | AI (phantom-deps): Compiled ESM package; openai is a real runtime dep used in source, not visible in dist entry point scan. | ai | |
| phantom-deps | phantom-dep:@flowrag/core | AI (phantom-deps): Same-org monorepo dep; phantom detection is a false positive for compiled packages. | ai | |
| dependencies | unvetted-dep:@flowrag/core | AI (dependencies): Internal monorepo sibling dependency; expected and stable for this scoped package family. | ai |