← Home

@sap-ai-sdk/core

**This package is designed for internal usage and should not be consumed directly.**

14
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

marikanersap-ospo-adminjjtangzhongpinwangkavithasivadavidkna-sap

Keywords

sap-ai-sdkai-core

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:cors AI (typosquat): @sap-ai-sdk/core is a legitimate SAP AI SDK sub-package, not a typosquat of 'cors'. The name similarity is purely coincidental; this is a scoped package in SAP's official namespace. ai

Versions (showing 14 of 14)

Version Deps Published
2.13.0 4 / 0
2.12.0 4 / 0
2.11.0 4 / 0
2.10.0 4 / 0
2.9.0 4 / 0
2.8.0 4 / 0
2.7.0 4 / 0
2.6.0 4 / 0
2.5.0 4 / 0
2.4.0 4 / 0
2.3.0 4 / 0
2.2.0 4 / 0
2.1.0 4 / 0
2.0.0 4 / 0

v2.13.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.