@nathapp/nax
AI Coding Agent Orchestrator — loops until done
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Package explicitly uses GitHub Actions CI with SLSA provenance; publisher change reflects intentional automation, not account compromise. | ai | |
| typosquat | typosquat.levenshtein:nuxt | AI (typosquat): Scoped package @nathapp/nax with clear identity; Levenshtein match to 'nuxt' is coincidental. | ai | |
| typosquat | typosquat.levenshtein:knex | AI (typosquat): Scoped package @nathapp/nax with clear identity; Levenshtein match to 'knex' is coincidental. | ai | |
| phantom-deps | phantom-dep:ink | AI (phantom-deps): Bun-bundled CLI; deps are compiled into dist/nax.js, not imported at runtime by Node resolution. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| typosquat | typosquat.levenshtein:next | AI (typosquat): Scoped package @nathapp/nax with clear identity; Levenshtein match to 'next' is coincidental. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| phantom-deps | phantom-dep:ink-spinner | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only dep for Bun/TS build; not imported at runtime. | ai | |
| phantom-deps | phantom-dep:ink-testing-library | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai |
Versions (showing 51 of 93)
| Version | Deps | Published |
|---|---|---|
| 0.69.0 | 8 / 4 | |
| 0.68.8 | 8 / 4 | |
| 0.68.7 | 8 / 4 | |
| 0.68.6 | 8 / 4 | |
| 0.68.5 | 8 / 4 | |
| 0.68.4 | 8 / 4 | |
| 0.68.3 | 8 / 4 | |
| 0.68.2 | 8 / 4 | |
| 0.68.1 | 8 / 4 | |
| 0.68.0 | 8 / 4 | |
| 0.67.19 | 8 / 4 | |
| 0.67.18 | 8 / 4 | |
| 0.67.17 | 8 / 4 | |
| 0.67.16 | 8 / 4 | |
| 0.67.15 | 8 / 4 | |
| 0.67.14 | 8 / 4 | |
| 0.67.13 | 8 / 4 | |
| 0.67.12 | 8 / 4 | |
| 0.67.11 | 8 / 4 | |
| 0.67.10 | 8 / 4 | |
| 0.67.9 | 8 / 4 | |
| 0.67.8 | 8 / 4 | |
| 0.67.7 | 8 / 4 | |
| 0.67.6 | 8 / 4 | |
| 0.67.5 | 8 / 4 | |
| 0.67.4 | 8 / 4 | |
| 0.67.3 | 8 / 4 | |
| 0.67.2 | 8 / 4 | |
| 0.67.1 | 8 / 4 | |
| 0.67.0 | 8 / 4 | |
| 0.66.4 | 8 / 4 | |
| 0.66.3 | 8 / 4 | |
| 0.66.2 | 8 / 4 | |
| 0.66.1 | 8 / 4 | |
| 0.66.0 | 8 / 4 | |
| 0.65.5 | 8 / 4 | |
| 0.65.4 | 8 / 4 | |
| 0.65.3 | 8 / 4 | |
| 0.65.2 | 8 / 4 | |
| 0.65.1 | 8 / 4 | |
| 0.65.0 | 8 / 4 | |
| 0.64.2 | 8 / 4 | |
| 0.64.1 | 8 / 4 | |
| 0.64.0 | 8 / 4 | |
| 0.63.1 | 8 / 4 | |
| 0.63.0 | 8 / 4 | |
| 0.62.0 | 8 / 4 | |
| 0.61.2 | 8 / 4 | |
| 0.61.1 | 8 / 4 | |
| 0.61.0 | 8 / 4 | |
| 0.60.2 | 8 / 4 |
v0.69.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.68.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.67.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.66.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.66.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.66.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.66.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.66.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.65.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.65.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.65.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.65.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.65.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.65.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.64.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.64.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.64.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.63.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.62.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.61.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.61.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.61.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.60.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.