← Home

@khanacademy/kas

npm Repository Homepage
49
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

khanacademy

Keywords

parsingequationexpressionalgebrasymbolic

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): Established Khan Academy package; missing gitHead reflects a CI/CD environment change, not a supply-chain risk. Publisher has a strong track record across 216+ approved packages. ai
provenance no-provenance AI (provenance): Khan Academy's @khanacademy/kas has never used Sigstore provenance; this is a stable process gap for this package, not a security signal. ai
typosquat typosquat.levenshtein:koa AI (typosquat): Package is a legitimate @khanacademy/-scoped library (KAS = Khan Academy Symbolic CAS). Levenshtein match to 'koa' is a mechanical false positive with no impersonation intent. ai
typosquat typosquat.levenshtein:qs AI (typosquat): Package is a legitimate @khanacademy/-scoped library. Levenshtein match to 'qs' is a mechanical false positive with no impersonation intent. ai

Versions (showing 49 of 49)

Version Deps Published
2.2.3 1 / 3
2.2.2 1 / 3
2.2.1 1 / 3
2.2.0 1 / 3
2.1.8 1 / 3
2.1.7 1 / 3
2.1.6 1 / 3
2.1.5 1 / 3
2.1.4 1 / 3
2.1.3 1 / 3
2.1.2 1 / 3
2.1.1 1 / 3
2.1.0 1 / 3
2.0.9 1 / 3
2.0.8 1 / 3
2.0.7 1 / 3
2.0.6 1 / 3
2.0.5 1 / 3
2.0.4 1 / 3
2.0.3 1 / 3
2.0.2 1 / 3
2.0.1 1 / 3
2.0.0 1 / 3
1.0.0 1 / 3
0.5.1 1 / 3
0.5.0 0 / 3
0.4.16 1 / 3
0.4.15 1 / 3
0.4.14 1 / 3
0.4.13 1 / 3
0.4.12 1 / 3
0.4.11 1 / 3
0.4.10 1 / 3
0.4.9 1 / 3
0.4.8 1 / 3
0.4.7 1 / 3
0.4.5 1 / 3
0.4.4 1 / 3
0.4.3 1 / 3
0.4.2 1 / 3
0.4.1 1 / 3
0.4.0 1 / 3
0.3.16 1 / 3
0.3.15 1 / 3
0.3.14 1 / 3
0.3.13 1 / 3
0.3.12 1 / 3
0.3.11 1 / 3
0.3.10 1 / 3