@letta-ai/letta-code
Letta Code is a CLI tool for interacting with stateful Letta agents from the terminal.
38
Versions
Apache-2.0
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
cpacker4shubsarahwooderscarenthomas
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/types/types/protocol_v2.d.ts | AI (source-diff): TypeScript .d.ts declaration file with long type union lines; not obfuscated code. | ai | |
| source-diff | source-size-dropped | AI (source-diff): Likely reflects bundling/build output change; no malicious indicators present. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New deps are same-org client and well-known 'open' utility; consistent with CLI feature expansion. | ai | |
| phantom-deps | phantom-dep:@earendil-works/pi-ai | AI (phantom-deps): Declared but not directly imported; phantom dep with no code execution path. | ai | |
| phantom-deps | phantom-dep:shiki | AI (phantom-deps): Syntax highlighting lib; likely used via config/bundler indirection, not a direct import. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@pierre/diffs | AI (phantom-deps): Diff rendering lib; referenced in config, not directly imported. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:ws | AI (phantom-deps): Referenced in config files; stable false positive for this CLI package. | ai | |
| phantom-deps | phantom-dep:strip-ansi | AI (phantom-deps): strip-ansi is a benign, well-known utility; phantom-dep false positive for this package. | ai | |
| phantom-deps | phantom-dep:sharp | AI (phantom-deps): Known implicit/binary runtime dependency; stable false positive. | ai | |
| phantom-deps | phantom-dep:lowlight | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:node-pty | AI (phantom-deps): Used via postinstall chmod; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:highlight.js | AI (phantom-deps): Config-file reference only; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@letta-ai/letta-client | AI (phantom-deps): Same org first-party dep; may be used in bundled output rather than directly imported in source. | ai | |
| dependencies | unvetted-dep:@letta-ai/letta-client | AI (dependencies): First-party dependency from the same @letta-ai org scope; expected for this CLI tool. | ai | |
| phantom-deps | phantom-dep:open | AI (phantom-deps): Standard utility for opening URLs/files; used in bundled output for this CLI tool. | ai | |
| phantom-deps | phantom-dep:glob | AI (phantom-deps): Standard utility; used in build/config scripts or bundled output for this CLI tool. | ai | |
| phantom-deps | phantom-dep:ink-link | AI (phantom-deps): ink-link is declared as a runtime dep; likely bundled into the output or used indirectly. Not a security concern for this CLI tool. | ai | |
| bogus-package | bogus-package | AI (bogus-package): README link dump signal is a false positive for a CLI tool with documentation links. No keywords is a minor omission. No spam or phishing indicators for this established package. | ai | |
| semgrep | semgrep:env-bulk-read | AI (semgrep): env-bulk-read is in an MCP stdio bridge that merges env for subprocess execution — expected pattern for MCP tool integration, not credential harvesting. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall applies vendor patches and fixes node-pty spawn-helper permissions on darwin-arm64 — standard pattern for a PTY-based terminal app. No network calls or credential access. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): env-spread is in a benchmark script passing process.env to a child process with one added debug flag — standard subprocess invocation pattern, not exfiltration. | ai |
Versions (showing 38 of 38)
| Version | Deps | Published |
|---|---|---|
| 0.27.19 | 13 / 17 | |
| 0.27.0 | 12 / 17 | |
| 0.26.6 | 11 / 18 | |
| 0.25.3 | 9 / 22 | |
| 0.25.2 | 9 / 20 | |
| 0.25.1 | 9 / 20 | |
| 0.25.0 | 10 / 20 | |
| 0.24.11 | 10 / 17 | |
| 0.24.10 | 10 / 17 | |
| 0.24.5 | 9 / 17 | |
| 0.24.4 | 9 / 17 | |
| 0.24.2 | 9 / 17 | |
| 0.23.7 | 9 / 17 | |
| 0.23.6 | 9 / 17 | |
| 0.23.1 | 9 / 17 | |
| 0.22.0 | 10 / 15 | |
| 0.21.17 | 9 / 15 | |
| 0.21.16 | 9 / 15 | |
| 0.21.13 | 9 / 15 | |
| 0.21.10 | 9 / 15 | |
| 0.21.9 | 9 / 15 | |
| 0.21.5 | 9 / 15 | |
| 0.21.4 | 9 / 15 | |
| 0.21.3 | 9 / 15 | |
| 0.21.2 | 9 / 15 | |
| 0.21.1 | 9 / 15 | |
| 0.20.0 | 9 / 15 | |
| 0.19.11 | 9 / 15 | |
| 0.19.8 | 9 / 15 | |
| 0.16.14 | 6 / 15 | |
| 0.14.0 | 5 / 14 | |
| 0.10.3 | 4 / 13 | |
| 0.7.3 | 4 / 13 | |
| 0.7.1 | 4 / 13 | |
| 0.6.1 | 4 / 13 | |
| 0.1.18 | 3 / 13 | |
| 0.1.9 | 1 / 12 | |
| 0.1.8 | 0 / 12 |
v0.27.19
2 findings
HIGH
New obfuscated file: dist/types/types/protocol_v2.d.ts
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.