@nathapp/nax
AI Coding Agent Orchestrator — loops until done
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Package explicitly uses GitHub Actions CI with SLSA provenance; publisher change reflects intentional automation, not account compromise. | ai | |
| typosquat | typosquat.levenshtein:nuxt | AI (typosquat): Scoped package @nathapp/nax with clear identity; Levenshtein match to 'nuxt' is coincidental. | ai | |
| typosquat | typosquat.levenshtein:knex | AI (typosquat): Scoped package @nathapp/nax with clear identity; Levenshtein match to 'knex' is coincidental. | ai | |
| phantom-deps | phantom-dep:ink | AI (phantom-deps): Bun-bundled CLI; deps are compiled into dist/nax.js, not imported at runtime by Node resolution. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| phantom-deps | phantom-dep:chalk | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| typosquat | typosquat.levenshtein:next | AI (typosquat): Scoped package @nathapp/nax with clear identity; Levenshtein match to 'next' is coincidental. | ai | |
| phantom-deps | phantom-dep:commander | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| phantom-deps | phantom-dep:ink-spinner | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| phantom-deps | phantom-dep:@types/react | AI (phantom-deps): Type-only dep for Bun/TS build; not imported at runtime. | ai | |
| phantom-deps | phantom-dep:ink-testing-library | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): Bun-bundled CLI; deps compiled into dist bundle. | ai |
Versions (showing 51 of 124)
| Version | Deps | Published |
|---|---|---|
| 0.74.0 | 9 / 4 | |
| 0.73.5 | 8 / 4 | |
| 0.73.4 | 8 / 4 | |
| 0.73.3 | 8 / 4 | |
| 0.73.2 | 8 / 4 | |
| 0.73.1 | 8 / 4 | |
| 0.73.0 | 8 / 4 | |
| 0.72.2 | 8 / 4 | |
| 0.72.1 | 8 / 4 | |
| 0.72.0 | 8 / 4 | |
| 0.71.1 | 8 / 4 | |
| 0.71.0 | 8 / 4 | |
| 0.70.8 | 8 / 4 | |
| 0.70.7 | 8 / 4 | |
| 0.70.6 | 8 / 4 | |
| 0.70.5 | 8 / 4 | |
| 0.70.4 | 8 / 4 | |
| 0.70.3 | 8 / 4 | |
| 0.70.2 | 8 / 4 | |
| 0.70.1 | 8 / 4 | |
| 0.70.0 | 8 / 4 | |
| 0.69.10 | 8 / 4 | |
| 0.69.9 | 8 / 4 | |
| 0.69.8 | 8 / 4 | |
| 0.69.7 | 8 / 4 | |
| 0.69.6 | 8 / 4 | |
| 0.69.5 | 8 / 4 | |
| 0.69.4 | 8 / 4 | |
| 0.69.3 | 8 / 4 | |
| 0.69.2 | 8 / 4 | |
| 0.69.1 | 8 / 4 | |
| 0.69.0 | 8 / 4 | |
| 0.68.8 | 8 / 4 | |
| 0.68.7 | 8 / 4 | |
| 0.68.6 | 8 / 4 | |
| 0.68.5 | 8 / 4 | |
| 0.68.4 | 8 / 4 | |
| 0.68.3 | 8 / 4 | |
| 0.68.2 | 8 / 4 | |
| 0.68.1 | 8 / 4 | |
| 0.68.0 | 8 / 4 | |
| 0.67.19 | 8 / 4 | |
| 0.67.18 | 8 / 4 | |
| 0.67.17 | 8 / 4 | |
| 0.67.16 | 8 / 4 | |
| 0.67.15 | 8 / 4 | |
| 0.67.14 | 8 / 4 | |
| 0.67.13 | 8 / 4 | |
| 0.67.12 | 8 / 4 | |
| 0.67.11 | 8 / 4 | |
| 0.67.10 | 8 / 4 |
v0.74.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.73.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.73.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.73.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.73.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.73.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.73.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.72.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.72.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.72.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.71.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.71.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.70.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.