@openclaw/kitchen-sink
Credential-free kitchen-sink OpenClaw plugin fixture covering the public plugin API surface.
18
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
steipetevincentkoc
Keywords
openclawopenclaw-plugincrabpotplugin-inspector
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from manual publish to GitHub Actions CI/CD; SLSA attestation confirms legitimate pipeline. | ai | |
| provenance | missing-githead | AI (provenance): SLSA provenance attestation present; gitHead absence is a minor gap not indicative of supply chain compromise. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Published via GitHub Actions with SLSA attestation; maintainer removal appears to be a legitimate org transition. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Intentional fixture/placeholder package; 0.0.0 reflects initial release convention, not malicious intent. | ai |