@promptbook/components
Promptbook: Create persistent AI agents that turn your company's scattered knowledge into action
10
Versions
BUSL-1.1
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
hejny
Keywords
aiai-agentsai-application-frameworkai-assistantai-automationai-developmentai-frameworkai-opsai-orchestrationai-pipelineai-platformai-scriptingai-sdkai-workflowapi-integrationautomation-frameworkbook-languagebrowserchatbotcontent-generationconversational-aicross-platformcross-providerdeveloper-toolsembeddingsfunction-callinggenerative-aihuman-readablejavascriptknowledge-baselanguage-modellarge-language-modelsllmllmopsmachine-learningmarkdown-dslmlopsmodel-agnosticmulti-modelmultimodalnatural-languagenatural-language-processingnlpnodejsorchestrationpipelineplain-englishpromptprompt-chainingprompt-engineeringprompt-managementprompt-templateragreasoningtask-automationtemplatetext-generationtext-processingtypescriptunified-interfacevendor-agnosticworkflowworkflow-engine
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:crypto | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| phantom-deps | phantom-dep:bottleneck | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| phantom-deps | phantom-dep:waitasecond | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| phantom-deps | phantom-dep:colors | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| phantom-deps | phantom-dep:crypto-js | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| phantom-deps | phantom-dep:katex | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| phantom-deps | phantom-dep:jsdom | AI (phantom-deps): Monorepo component package; deps referenced in config, not direct imports — stable false positive. | ai | |
| phantom-deps | phantom-dep:jspdf | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| phantom-deps | phantom-dep:dompurify | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| phantom-deps | phantom-dep:html-to-image | AI (phantom-deps): Same pattern; config-referenced dep in component package. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): new Function used solely for browser environment detection (window check); benign pattern. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get used inside a standard Proxy trap handler — idiomatic JS pattern, not obfuscation. | ai | |
| semgrep | semgrep:eval-usage | AI (semgrep): eval() is used in a script-execution tool with a TODO to refactor; consistent with AI pipeline template engine, not malicious. | ai |
Versions (showing 10 of 10)
| Version | Deps | Published |
|---|---|---|
| 0.112.0 | 19 / 0 | |
| 0.110.0 | 17 / 0 | |
| 0.105.0 | 15 / 0 | |
| 0.104.0 | 14 / 0 | |
| 0.103.0 | 15 / 0 | |
| 0.102.0 | 4 / 0 | |
| 0.101.0 | 3 / 0 | |
| 0.100.2 | 1 / 0 | |
| 0.100.1 | 1 / 0 | |
| 0.100.0 | 1 / 0 |
v0.112.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.110.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.105.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.