@scalar/agent-chat
Agent chat components
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@scalar/schemas | AI (dependencies): Same-org @scalar package; consistent with the rest of the dependency tree. | ai | |
| provenance | publisher-changed | AI (provenance): hanspagel is the established Scalar org maintainer with 63 approved packages; transition from bgrcs is a legitimate org handoff. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Scalar org maintainer consolidation; hanspagel is a known trusted publisher in the ecosystem. | ai | |
| dependencies | unvetted-dep:truncate-json | AI (dependencies): Small utility dep pinned to exact version; no malicious indicators. | ai | |
| dependencies | unvetted-dep:@scalar/icons | AI (dependencies): Same @scalar org scope; consistent with this package's dependency pattern. | ai | |
| dependencies | unvetted-dep:@scalar/use-toasts | AI (dependencies): Same @scalar org scope; consistent with this package's dependency pattern. | ai | |
| phantom-deps | phantom-dep:@scalar/themes | AI (phantom-deps): @scalar/themes is explicitly declared in dependencies; phantom-dep is a false positive for this package. | ai |
Versions (showing 51 of 66)
| Version | Deps | Published |
|---|---|---|
| 0.12.22 | 19 / 10 | |
| 0.12.21 | 19 / 10 | |
| 0.12.20 | 19 / 10 | |
| 0.12.19 | 19 / 10 | |
| 0.12.18 | 19 / 10 | |
| 0.12.17 | 19 / 10 | |
| 0.12.16 | 19 / 10 | |
| 0.12.15 | 19 / 10 | |
| 0.12.14 | 19 / 10 | |
| 0.12.13 | 19 / 10 | |
| 0.12.12 | 19 / 10 | |
| 0.12.11 | 19 / 10 | |
| 0.12.10 | 19 / 10 | |
| 0.12.9 | 19 / 10 | |
| 0.12.8 | 19 / 10 | |
| 0.12.7 | 19 / 10 | |
| 0.12.6 | 19 / 10 | |
| 0.12.5 | 19 / 10 | |
| 0.12.4 | 19 / 10 | |
| 0.12.3 | 19 / 10 | |
| 0.12.2 | 19 / 10 | |
| 0.12.1 | 19 / 10 | |
| 0.12.0 | 19 / 10 | |
| 0.10.13 | 18 / 8 | |
| 0.10.12 | 18 / 8 | |
| 0.10.11 | 18 / 8 | |
| 0.10.10 | 18 / 8 | |
| 0.10.8 | 18 / 5 | |
| 0.10.1 | 19 / 6 | |
| 0.10.0 | 19 / 6 | |
| 0.9.16 | 18 / 6 | |
| 0.9.4 | 18 / 8 | |
| 0.7.2 | 18 / 8 | |
| 0.7.1 | 18 / 8 | |
| 0.5.17 | 18 / 8 | |
| 0.5.9 | 17 / 8 | |
| 0.5.8 | 17 / 8 | |
| 0.5.7 | 17 / 8 | |
| 0.5.6 | 17 / 8 | |
| 0.5.5 | 17 / 8 | |
| 0.5.4 | 17 / 8 | |
| 0.5.3 | 17 / 8 | |
| 0.5.2 | 17 / 8 | |
| 0.4.8 | 16 / 8 | |
| 0.4.7 | 16 / 8 | |
| 0.4.6 | 16 / 8 | |
| 0.4.5 | 16 / 8 | |
| 0.4.4 | 16 / 8 | |
| 0.4.3 | 16 / 8 | |
| 0.4.2 | 16 / 8 | |
| 0.4.1 | 16 / 8 |
v0.12.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.