← Home

@mastra/arthur

npm Repository Homepage

Arthur AI observability provider for Mastra - exports traces using OpenInference semantic conventions

24
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

abhiaiyersmthomasrase-calcsamnikaiyertylerbarneswardpeet

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata suspicious-initial-version AI (npm-metadata): 0.0.0 is standard for mastra monorepo package initial releases; not a malware signal given publisher track record. ai
dependencies unvetted-dep:@arizeai/openinference-genai AI (dependencies): Legitimate OpenInference observability library; consistent with Arthur AI tracing purpose of this package. ai
dependencies unvetted-dep:@arizeai/openinference-semantic-conventions AI (dependencies): Legitimate OpenInference semantic conventions library; consistent with Arthur AI tracing purpose of this package. ai

Versions (showing 24 of 24)

Version Deps Published
0.4.5 7 / 10
0.4.4 7 / 10
0.4.3 7 / 10
0.4.2 7 / 10
0.4.1 7 / 10
0.4.0 7 / 10
0.3.4 7 / 10
0.3.2 7 / 10
0.3.1 7 / 10
0.3.0 7 / 10
0.2.12 7 / 10
0.2.11 7 / 10
0.2.10 7 / 10
0.2.9 7 / 10
0.2.8 7 / 10
0.2.7 7 / 10
0.2.6 7 / 10
0.2.5 7 / 10
0.2.4 7 / 10
0.2.3 7 / 10
0.2.2 7 / 10
0.2.1 7 / 10
0.2.0 7 / 10
0.0.0 7 / 10

v0.4.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.