@opencode-ai/plugin
100
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
adamelmorethdxr
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Side effect of GitHub Actions CI/CD publishing; not a security concern for this established package. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher changed from personal account (thdxr) to GitHub Actions CI/CD — standard migration to automated publishing for this org. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Part of the @opencode-ai monorepo with automated CI publishing; missing metadata (description, repo, keywords) and small entry point are consistent with programmatic monorepo releases, not spam/malware. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Automated monorepo publishing; missing description is a known pattern for this namespace across 6194 versions. | ai |
Versions (showing 100 of 413)
| Version | Deps | Published |
|---|---|---|
| 1.2.9 | 2 / 4 | |
| 1.2.8 | 2 / 4 | |
| 1.2.7 | 2 / 4 | |
| 1.2.6 | 2 / 4 | |
| 1.2.5 | 2 / 4 | |
| 1.2.4 | 2 / 4 | |
| 1.2.3 | 2 / 4 | |
| 1.2.2 | 2 / 4 | |
| 1.2.1 | 2 / 4 | |
| 1.2.0 | 2 / 4 | |
| 1.1.65 | 2 / 4 | |
| 1.1.64 | 2 / 4 | |
| 1.1.63 | 2 / 4 | |
| 1.1.62 | 2 / 4 | |
| 1.1.61 | 2 / 4 | |
| 1.1.60 | 2 / 4 | |
| 1.1.59 | 2 / 4 | |
| 1.1.58 | 2 / 4 | |
| 1.1.57 | 2 / 4 | |
| 1.1.56 | 2 / 4 | |
| 1.1.55 | 2 / 4 | |
| 1.1.54 | 2 / 4 | |
| 1.1.53 | 2 / 4 | |
| 1.1.52 | 2 / 4 | |
| 1.1.51 | 2 / 4 | |
| 1.1.50 | 2 / 4 | |
| 1.1.49 | 2 / 4 | |
| 1.1.48 | 2 / 4 | |
| 1.1.47 | 2 / 4 | |
| 1.1.46 | 2 / 4 | |
| 1.1.45 | 2 / 4 | |
| 1.1.44 | 2 / 4 | |
| 1.1.43 | 2 / 4 | |
| 1.1.42 | 2 / 4 | |
| 1.1.41 | 2 / 4 | |
| 1.1.40 | 2 / 4 | |
| 1.1.39 | 2 / 4 | |
| 1.1.38 | 2 / 4 | |
| 1.1.37 | 2 / 4 | |
| 1.1.36 | 2 / 4 | |
| 1.1.35 | 2 / 4 | |
| 1.1.34 | 2 / 4 | |
| 1.1.33 | 2 / 4 | |
| 1.1.32 | 2 / 4 | |
| 1.1.31 | 2 / 4 | |
| 1.1.30 | 2 / 4 | |
| 1.1.29 | 2 / 4 | |
| 1.1.28 | 2 / 4 | |
| 1.1.27 | 2 / 4 | |
| 1.1.26 | 2 / 4 | |
| 1.1.25 | 2 / 4 | |
| 1.1.24 | 2 / 4 | |
| 1.1.23 | 2 / 4 | |
| 1.1.21 | 2 / 4 | |
| 1.1.20 | 2 / 4 | |
| 1.1.19 | 2 / 4 | |
| 1.1.18 | 2 / 4 | |
| 1.1.17 | 2 / 4 | |
| 1.1.16 | 2 / 4 | |
| 1.1.15 | 2 / 4 | |
| 1.1.14 | 2 / 4 | |
| 1.1.13 | 2 / 4 | |
| 1.1.12 | 2 / 4 | |
| 1.1.11 | 2 / 4 | |
| 1.1.10 | 2 / 4 | |
| 1.1.8 | 2 / 4 | |
| 1.1.7 | 2 / 4 | |
| 1.1.6 | 2 / 4 | |
| 1.1.5 | 2 / 4 | |
| 1.1.4 | 2 / 4 | |
| 1.1.3 | 2 / 4 | |
| 1.1.2 | 2 / 4 | |
| 1.1.1 | 2 / 4 | |
| 1.0.224 | 2 / 4 | |
| 1.0.223 | 2 / 4 | |
| 1.0.222 | 2 / 4 | |
| 1.0.221 | 2 / 4 | |
| 1.0.220 | 2 / 4 | |
| 1.0.219 | 2 / 4 | |
| 1.0.218 | 2 / 4 | |
| 1.0.217 | 2 / 4 | |
| 1.0.216 | 2 / 4 | |
| 1.0.215 | 2 / 4 | |
| 1.0.214 | 2 / 4 | |
| 1.0.213 | 2 / 4 | |
| 1.0.212 | 2 / 4 | |
| 1.0.211 | 2 / 4 | |
| 1.0.210 | 2 / 4 | |
| 1.0.209 | 2 / 4 | |
| 1.0.208 | 2 / 4 | |
| 1.0.207 | 2 / 4 | |
| 1.0.206 | 2 / 4 | |
| 1.0.205 | 2 / 4 | |
| 1.0.204 | 2 / 4 | |
| 1.0.203 | 2 / 4 | |
| 1.0.202 | 2 / 4 | |
| 1.0.201 | 2 / 4 | |
| 1.0.200 | 2 / 4 | |
| 1.0.199 | 2 / 4 | |
| 1.0.198 | 2 / 4 |
Showing 100 of 413
Next page →