@kb-labs/agent-core
Core logic for KB Labs Agents. Session management, orchestration, quality gates, multi-agent coordination.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:zod | AI (phantom-deps): zod is a declared runtime dep; phantom-dep heuristic fires on config-only references, stable FP for this package. | ai |
Versions (showing 34 of 34)
| Version | Deps | Published |
|---|---|---|
| 2.109.0 | 10 / 8 | |
| 2.107.0 | 10 / 8 | |
| 2.106.0 | 10 / 8 | |
| 2.105.0 | 10 / 8 | |
| 2.104.0 | 10 / 8 | |
| 2.103.0 | 10 / 8 | |
| 2.102.0 | 10 / 8 | |
| 2.101.0 | 10 / 8 | |
| 2.100.0 | 10 / 8 | |
| 2.98.0 | 10 / 8 | |
| 2.96.0 | 10 / 8 | |
| 2.94.0 | 10 / 8 | |
| 2.93.0 | 10 / 8 | |
| 2.89.0 | 10 / 8 | |
| 2.81.0 | 10 / 8 | |
| 2.80.0 | 10 / 8 | |
| 2.72.0 | 10 / 8 | |
| 2.69.0 | 10 / 8 | |
| 2.66.0 | 10 / 8 | |
| 2.60.0 | 10 / 8 | |
| 2.53.0 | 10 / 8 | |
| 2.46.0 | 10 / 8 | |
| 2.45.0 | 10 / 8 | |
| 2.44.0 | 10 / 8 | |
| 2.41.0 | 10 / 8 | |
| 2.39.0 | 10 / 8 | |
| 2.32.0 | 10 / 8 | |
| 2.30.0 | 10 / 8 | |
| 2.19.0 | 10 / 8 | |
| 2.15.0 | 10 / 8 | |
| 2.10.0 | 10 / 8 | |
| 2.9.0 | 10 / 8 | |
| 2.6.0 | 10 / 8 | |
| 0.6.0 | 10 / 8 |
v2.109.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.107.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.106.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.105.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.104.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.103.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.102.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.101.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.100.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.98.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.96.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.