← Home

@moltzap/server-core

npm Repository Homepage

Building blocks for agent-to-agent messaging — services, RPC, WebSocket, encryption

84
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tapanc

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@effect/sql-kysely AI (dependencies): @effect/sql-kysely is a legitimate Effect ecosystem package; stable dependency for this package. ai
provenance missing-githead AI (provenance): SLSA provenance attestation is present; missing gitHead is a minor metadata gap, not a supply-chain risk for this package. ai
source-diff large-new-source-files AI (source-diff): Size increase matches documented architectural refactor from Hono to Effect/SQL; SLSA provenance confirms CI build integrity. ai
source-diff source-size-tripled AI (source-diff): 5.6x growth consistent with adding Effect platform, SQL, and pglite layers; not indicative of injected payload given SLSA attestation. ai
phantom-deps phantom-dep:@hono/node-server AI (phantom-deps): Config-referenced dependency; likely false positive for this package. ai
phantom-deps phantom-dep:@hono/node-ws AI (phantom-deps): Config-referenced dependency; likely false positive for this package. ai
phantom-deps phantom-dep:pino-pretty AI (phantom-deps): pino-pretty is a logging formatter typically used as a dev/optional dep; not directly imported is expected. ai
phantom-deps phantom-dep:@electric-sql/pglite AI (phantom-deps): In-process PG adapter likely used in test/dev config; not directly imported is expected. ai
phantom-deps phantom-dep:@effect/sql-kysely AI (phantom-deps): SQL adapter referenced in config files; not directly imported is a common pattern for optional DB adapters. ai
phantom-deps phantom-dep:@effect/sql-pg AI (phantom-deps): SQL adapter referenced in config files; not directly imported is a common pattern for optional DB adapters. ai

Versions (showing 84 of 84)

Version Deps Published
2026.718.0 19 / 10
2026.717.0 19 / 10
2026.529.0 19 / 9
2026.528.0 19 / 9
2026.526.1 19 / 9
2026.526.0 19 / 9
2026.525.0 19 / 9
2026.524.4 19 / 9
2026.524.3 21 / 9
2026.524.2 14 / 9
2026.524.1 14 / 9
2026.524.0 14 / 9
2026.523.0 14 / 9
2026.520.1 14 / 9
2026.520.0 14 / 9
2026.519.3 14 / 9
2026.519.2 14 / 9
2026.519.1 14 / 9
2026.519.0 14 / 9
2026.518.0 14 / 9
2026.511.4 17 / 9
2026.511.3 17 / 9
2026.511.2 17 / 9
2026.511.1 17 / 9
2026.511.0 17 / 9
2026.510.0 17 / 9
2026.509.0 17 / 9
2026.508.5 17 / 9
2026.508.4 17 / 9
2026.508.3 17 / 9
2026.508.2 17 / 9
2026.508.1 17 / 9
2026.508.0 17 / 9
2026.507.2 17 / 9
2026.507.1 17 / 9
2026.507.0 17 / 9
2026.506.5 17 / 9
2026.506.4 17 / 9
2026.506.3 17 / 9
2026.506.2 17 / 9
2026.506.1 17 / 9
2026.506.0 17 / 9
2026.505.6 17 / 9
2026.505.5 17 / 9
2026.505.4 17 / 9
2026.505.3 17 / 9
2026.505.2 17 / 9
2026.505.1 17 / 9
2026.505.0 17 / 9
2026.504.2 17 / 9
2026.504.1 17 / 9
2026.504.0 17 / 9
2026.503.10 17 / 9
2026.503.9 17 / 9
2026.503.8 17 / 9
2026.503.7 17 / 9
2026.503.6 17 / 9
2026.503.5 17 / 9
2026.503.4 17 / 9
2026.503.3 17 / 9
2026.503.2 17 / 9
2026.503.1 17 / 9
2026.503.0 17 / 9
2026.502.1 17 / 9
2026.502.0 17 / 9
2026.501.7 17 / 9
2026.501.6 17 / 9
2026.501.5 17 / 9
2026.501.4 17 / 9
2026.501.3 17 / 9
2026.501.2 17 / 9
2026.501.1 17 / 9
2026.501.0 17 / 9
2026.430.3 17 / 9
2026.430.2 17 / 9
2026.430.1 17 / 9
2026.430.0 17 / 9
2026.425.4 17 / 9
2026.425.3 17 / 9
2026.425.2 16 / 10
2026.425.1 16 / 10
2026.425.0 16 / 10
2026.414.0 7 / 9
2026.408.0 7 / 9

v2026.718.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.717.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.505.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.505.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.505.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.505.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.505.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.505.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.504.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.504.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.504.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.503.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.502.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.501.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.501.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.501.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.501.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.430.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.430.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.430.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2026.425.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.