← Home

@o3r/mcp

npm Repository Homepage

Experimental package — This module provides a MCP Server

51
Versions
BSD-3-Clause
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

kpanotvscaiceanu-1ajbourgeois-1anicohoffmannmrednic-1afpaul_1asdo-1amatthieucrouzet-1a

Keywords

mcpotterotter-module

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition from human publisher to GitHub Actions CI/CD is documented by SLSA attestation; consistent with monorepo automation. ai
publish-pattern new-deps-added AI (publish-pattern): New @ama-mcp/* deps are from the same AmadeusITGroup/otter monorepo; @octokit/rest is a well-established GitHub API client. ai
typosquat typosquat.levenshtein:yup AI (typosquat): Scoped @o3r/ package from AmadeusITGroup/otter monorepo; Levenshtein match to 'yup' is a false positive. ai
phantom-deps phantom-dep:tslib AI (phantom-deps): tslib is a standard TypeScript runtime helper; implicit transitive usage is expected. ai
phantom-deps phantom-dep:@octokit/rest AI (phantom-deps): Referenced in config files per finding; stable false positive for this package. ai

Versions (showing 51 of 72)

View all versions
Version Deps Published
14.5.0 9 / 48
14.4.4 9 / 48
14.4.3 9 / 48
14.4.2 9 / 48
14.4.1 9 / 48
14.4.0 9 / 48
14.3.4 9 / 48
14.3.3 9 / 48
14.3.2 9 / 48
14.3.1 9 / 48
14.3.0 9 / 48
14.2.6 9 / 48
14.2.3 9 / 48
14.2.1 9 / 48
14.2.0 9 / 48
14.1.13 9 / 48
14.1.12 9 / 48
14.1.11 9 / 48
14.1.10 9 / 48
14.1.9 9 / 48
14.1.8 9 / 48
14.1.7 9 / 48
14.1.6 9 / 48
14.1.4 9 / 48
14.1.1 9 / 48
14.1.0 9 / 48
14.0.13 9 / 47
14.0.12 9 / 47
14.0.10 9 / 47
14.0.8 9 / 47
14.0.5 9 / 47
14.0.4 9 / 47
14.0.3 9 / 47
14.0.1 9 / 47
14.0.0 9 / 47
13.5.13 9 / 45
13.5.12 9 / 45
13.5.11 9 / 45
13.5.10 9 / 45
13.5.8 9 / 45
13.5.7 9 / 45
13.5.4 9 / 45
13.5.3 9 / 45
13.5.2 9 / 45
13.5.1 9 / 45
13.5.0 9 / 45
13.4.5 8 / 46
13.4.4 8 / 46
13.4.2 8 / 46
13.4.1 8 / 46
13.4.0 8 / 46

v14.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.4.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.4.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.3.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.3.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.2.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.1.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.1.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v14.0.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.