@inboxapi/cli
📧 Email for your AI 🤖
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
shaond
Keywords
mcpinboxapiproxyemailai
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:silent-process-exec | AI (semgrep): The detached spawn is a self-update mechanism running 'npm install -g @inboxapi/cli@<version>' — a legitimate CLI auto-update pattern, not a reverse shell or miner. | ai | |
| semgrep | semgrep:silent-process-exec-var | AI (semgrep): Same self-update spawn as silent-process-exec; the variable is the package's own remote version string, not arbitrary external input. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): Scoped package @inboxapi/cli has no semantic relationship to 'joi'; Levenshtein match is coincidental. Clear, coherent identity as an email API CLI tool. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): CLI wrapper for platform-specific Rust binaries; child_process.spawn is the standard pattern for launching native binaries in npm CLI packages. | ai |
Versions (showing 51 of 53)
| Version | Deps | Published |
|---|---|---|
| 0.3.16 | 0 / 0 | |
| 0.3.15 | 0 / 0 | |
| 0.3.14 | 0 / 0 | |
| 0.3.13 | 0 / 0 | |
| 0.3.12 | 0 / 0 | |
| 0.3.11 | 0 / 0 | |
| 0.3.10 | 0 / 0 | |
| 0.3.9 | 0 / 0 | |
| 0.3.8 | 0 / 0 | |
| 0.3.7 | 0 / 0 | |
| 0.3.6 | 0 / 0 | |
| 0.3.5 | 0 / 0 | |
| 0.3.4 | 0 / 0 | |
| 0.3.3 | 0 / 0 | |
| 0.3.2 | 0 / 0 | |
| 0.3.1 | 0 / 0 | |
| 0.3.0 | 0 / 0 | |
| 0.2.25 | 1 / 0 | |
| 0.2.24 | 1 / 0 | |
| 0.2.23 | 1 / 0 | |
| 0.2.22 | 1 / 0 | |
| 0.2.21 | 1 / 0 | |
| 0.2.20 | 1 / 0 | |
| 0.2.19 | 1 / 0 | |
| 0.2.18 | 1 / 0 | |
| 0.2.17 | 1 / 0 | |
| 0.2.16 | 1 / 0 | |
| 0.2.15 | 1 / 0 | |
| 0.2.14 | 1 / 0 | |
| 0.2.13 | 0 / 0 | |
| 0.2.12 | 0 / 0 | |
| 0.2.11 | 0 / 0 | |
| 0.2.10 | 0 / 0 | |
| 0.2.9 | 0 / 0 | |
| 0.2.8 | 0 / 0 | |
| 0.2.7 | 0 / 0 | |
| 0.2.6 | 0 / 0 | |
| 0.2.5 | 0 / 0 | |
| 0.2.4 | 0 / 0 | |
| 0.2.3 | 0 / 0 | |
| 0.2.2 | 0 / 0 | |
| 0.2.1 | 0 / 0 | |
| 0.2.0 | 0 / 0 | |
| 0.1.9 | 0 / 0 | |
| 0.1.8 | 0 / 0 | |
| 0.1.7 | 0 / 0 | |
| 0.1.6 | 0 / 0 | |
| 0.1.5 | 0 / 0 | |
| 0.1.4 | 0 / 0 | |
| 0.1.3 | 0 / 0 | |
| 0.1.2 | 0 / 0 |