@scalar/api-client
the open source API testing client
9
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
cameronrohanimarclavescalar_geoffhwkrhanspagelamritkbgrcsscalar-machine
Keywords
apiclientgraphqlpostman alternativeresttesting
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/Editor-BomsGWHx.js | AI (source-diff): Bundled Vite output with readable imports/comments; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/monacoeditorwork/editor.worker.bundle.js | AI (source-diff): Monaco editor esbuild worker bundle, not obfuscation; readable source paths. | ai | |
| source-diff | obfuscated-file:dist/v2/features/editor/schemas/openapi-3.1-schema.json.js | AI (source-diff): Minified OpenAPI 3.1 JSON schema module, benign data. | ai | |
| source-diff | net-exec-file:dist/monacoeditorwork/yaml.worker.bundle.js | AI (source-diff): Bundled monaco worker; net+exec pattern is minified library code, not a dropper. | ai | |
| source-diff | obfuscated-file:dist/monacoeditorwork/yaml.worker.bundle.js | AI (source-diff): Monaco editor esbuild worker bundle, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/monacoeditorwork/json.worker.bundle.js | AI (source-diff): Monaco editor esbuild worker bundle, not obfuscation. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): jsonc-parser is a well-known Microsoft-maintained package; addition is consistent with the v2 refactor. | ai | |
| dependencies | unvetted-dep:@scalar/blocks | AI (dependencies): Same-org @scalar/* package; consistent with Scalar's monorepo pattern across all versions. | ai | |
| phantom-deps | phantom-dep:@scalar/json-magic | AI (phantom-deps): Same-org package; stable FP for this package. | ai | |
| phantom-deps | phantom-dep:yaml | AI (phantom-deps): Used in config/type files; stable FP for this package. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): Used in type/config files; stable FP for this package. | ai | |
| phantom-deps | phantom-dep:@scalar/themes | AI (phantom-deps): Same-org package; likely re-exported or used via convention, stable FP. | ai | |
| phantom-deps | phantom-dep:type-fest | AI (phantom-deps): type-fest is a type-only utility; phantom-dep false positive for this package. | ai | |
| dependencies | unvetted-dep:@scalar/analytics-client | AI (dependencies): Internal @scalar monorepo sibling package; expected dependency pattern. | ai | |
| dependencies | unvetted-dep:@scalar/use-codemirror | AI (dependencies): First-party @scalar monorepo sibling; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@scalar/validation | AI (dependencies): First-party @scalar monorepo sibling; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@scalar/use-toasts | AI (dependencies): First-party @scalar monorepo sibling; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@scalar/use-hooks | AI (dependencies): First-party @scalar monorepo sibling; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@scalar/typebox | AI (dependencies): First-party @scalar monorepo sibling; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@scalar/icons | AI (dependencies): First-party @scalar monorepo sibling; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@scalar/themes | AI (dependencies): First-party @scalar monorepo sibling; stable pattern across versions. | ai | |
| phantom-deps | phantom-dep:@types/har-format | AI (phantom-deps): Type-only package; not directly imported at runtime by convention. | ai | |
| phantom-deps | phantom-dep:vite-plugin-monaco-editor | AI (phantom-deps): Vite plugin loaded via vite config, not direct import; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@headlessui/tailwindcss | AI (phantom-deps): Tailwind plugin loaded via config, not direct import; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:focus-trap | AI (phantom-deps): focus-trap is a runtime dep used via headlessui/vue; phantom-dep heuristic false positive for this package. | ai |