@moltzap/client
MoltZap client service — connection, conversation state, and cross-conversation context
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@effect/printer | AI (phantom-deps): Referenced in config/tooling; @effect packages are often peer/transitive deps not directly imported. | ai | |
| phantom-deps | phantom-dep:@effect/printer-ansi | AI (phantom-deps): Referenced in config/tooling; @effect packages are often peer/transitive deps not directly imported. | ai | |
| phantom-deps | phantom-dep:@effect/typeclass | AI (phantom-deps): Referenced in config/tooling; @effect packages are often peer/transitive deps not directly imported. | ai | |
| provenance | missing-githead | AI (provenance): SLSA provenance attestation compensates; gitHead absence is cosmetic given Sigstore-signed CI publish. | ai | |
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI/CD publishing confirmed by SLSA Sigstore attestation; expected for this package going forward. | ai | |
| dependencies | unvetted-dep:@effect/cli | AI (dependencies): @effect/cli is a well-known Effect ecosystem library; unvetted status reflects review lag, not risk. | ai | |
| dependencies | unvetted-dep:@moltzap/protocol | AI (dependencies): First-party sibling package from the same monorepo/publisher; consistent with the project structure. | ai |
Versions (showing 54 of 54)
| Version | Deps | Published |
|---|---|---|
| 2026.724.2 | 9 / 7 | |
| 2026.724.1 | 9 / 8 | |
| 2026.724.0 | 9 / 8 | |
| 2026.723.0 | 9 / 8 | |
| 2026.722.0 | 9 / 8 | |
| 2026.721.2 | 9 / 8 | |
| 2026.721.1 | 9 / 8 | |
| 2026.721.0 | 9 / 8 | |
| 2026.720.0 | 9 / 8 | |
| 2026.718.0 | 9 / 8 | |
| 2026.717.0 | 9 / 8 | |
| 2026.529.0 | 10 / 8 | |
| 2026.528.0 | 10 / 8 | |
| 2026.525.0 | 10 / 8 | |
| 2026.524.0 | 10 / 7 | |
| 2026.523.0 | 10 / 7 | |
| 2026.520.2 | 9 / 7 | |
| 2026.520.1 | 9 / 7 | |
| 2026.520.0 | 9 / 7 | |
| 2026.519.3 | 9 / 7 | |
| 2026.519.2 | 9 / 7 | |
| 2026.519.1 | 9 / 7 | |
| 2026.519.0 | 9 / 7 | |
| 2026.518.0 | 9 / 7 | |
| 2026.511.1 | 6 / 7 | |
| 2026.511.0 | 6 / 7 | |
| 2026.508.1 | 6 / 7 | |
| 2026.508.0 | 6 / 7 | |
| 2026.507.0 | 6 / 7 | |
| 2026.506.0 | 6 / 8 | |
| 2026.505.2 | 6 / 8 | |
| 2026.505.1 | 6 / 8 | |
| 2026.505.0 | 6 / 8 | |
| 2026.504.2 | 6 / 8 | |
| 2026.504.1 | 6 / 8 | |
| 2026.504.0 | 6 / 8 | |
| 2026.503.4 | 6 / 8 | |
| 2026.503.3 | 6 / 8 | |
| 2026.503.2 | 6 / 8 | |
| 2026.503.1 | 6 / 8 | |
| 2026.503.0 | 6 / 8 | |
| 2026.501.2 | 6 / 8 | |
| 2026.501.1 | 6 / 8 | |
| 2026.501.0 | 6 / 8 | |
| 2026.430.2 | 6 / 8 | |
| 2026.430.1 | 6 / 8 | |
| 2026.430.0 | 6 / 8 | |
| 2026.425.2 | 6 / 8 | |
| 2026.425.1 | 6 / 8 | |
| 2026.425.0 | 6 / 8 | |
| 2026.414.0 | 3 / 7 | |
| 2026.413.0 | 3 / 7 | |
| 2026.411.0 | 3 / 7 | |
| 2026.407.0 | 3 / 7 |
v2026.724.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.724.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.724.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.723.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.722.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.721.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.721.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.721.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.720.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.718.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.717.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2026.529.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.