← Home

@getpaseo/server

npm

Paseo backend server

51
Versions
—
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

boudra

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@getpaseo/client AI (phantom-deps): Same-org package; phantom-dep heuristic unreliable for monorepo siblings. ai
phantom-deps phantom-dep:fast-uri AI (phantom-deps): fast-uri is a transitive/config dep; phantom-dep false positive stable for this package. ai
phantom-deps phantom-dep:@deepgram/sdk AI (phantom-deps): Declared runtime dep used via config/indirect import; stable false positive for this package. ai
phantom-deps phantom-dep:@lezer/common AI (phantom-deps): Declared runtime dep used via config/indirect import; stable false positive for this package. ai
phantom-deps phantom-dep:@ai-sdk/openai AI (phantom-deps): Declared runtime dep used via config/indirect import; stable false positive for this package. ai
phantom-deps phantom-dep:tiny-invariant AI (phantom-deps): Declared runtime dep used via config/indirect import; stable false positive for this package. ai
phantom-deps phantom-dep:express-basic-auth AI (phantom-deps): Declared runtime dep used via config/indirect import; stable false positive for this package. ai
phantom-deps phantom-dep:strip-ansi AI (phantom-deps): Declared runtime dep used via config/indirect import; stable false positive for this package. ai
phantom-deps phantom-dep:pino-pretty AI (phantom-deps): Declared runtime dep used via config/indirect import; stable false positive for this package. ai
phantom-deps phantom-dep:@mariozechner/pi-agent-core AI (phantom-deps): Conditionally loaded agent core dependency; phantom-dep false positive for this package. ai
phantom-deps phantom-dep:@mariozechner/pi-ai AI (phantom-deps): Conditionally loaded AI provider dependency; phantom-dep false positive for this package. ai
phantom-deps phantom-dep:sherpa-onnx-node AI (phantom-deps): sherpa-onnx-node is a speech/ASR native module used conditionally; phantom-dep heuristic fires on optional/config-driven imports. ai
typosquat typosquat.levenshtein:semver AI (typosquat): @getpaseo/server is a scoped backend package for the Paseo product; 'server' vs 'semver' is a coincidental Levenshtein match, not impersonation. ai

Versions (showing 51 of 94)

View all versions
Version Deps Published
0.1.101 34 / 11
0.1.100 34 / 11
0.1.99 34 / 11
0.1.98 34 / 11
0.1.97 34 / 11
0.1.96 34 / 11
0.1.95 34 / 11
0.1.94 34 / 11
0.1.93 34 / 11
0.1.92 34 / 11
0.1.91 34 / 11
0.1.90 34 / 11
0.1.89 34 / 11
0.1.88 34 / 11
0.1.87 34 / 11
0.1.86 34 / 11
0.1.85 34 / 11
0.1.84 34 / 11
0.1.83 34 / 11
0.1.82 34 / 11
0.1.81 34 / 11
0.1.80 34 / 11
0.1.79 34 / 11
0.1.78 37 / 11
0.1.77 37 / 11
0.1.76 37 / 11
0.1.75 37 / 11
0.1.74 37 / 11
0.1.73 37 / 11
0.1.72 37 / 11
0.1.71 37 / 11
0.1.70 37 / 11
0.1.69 36 / 11
0.1.68 36 / 11
0.1.67 36 / 11
0.1.66 35 / 11
0.1.65 35 / 11
0.1.63 34 / 11
0.1.62 38 / 12
0.1.61 38 / 12
0.1.60 38 / 12
0.1.59 37 / 12
0.1.58 37 / 12
0.1.57 37 / 12
0.1.56 36 / 12
0.1.55 36 / 12
0.1.54 35 / 12
0.1.53 35 / 12
0.1.52 34 / 12
0.1.51 34 / 12
0.1.50 34 / 12

v0.1.101

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.