@scalar/api-reference
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@scalar/openapi-upgrader | AI (phantom-deps): Same-org scoped dependency; declared and re-exported, stable pattern. | ai | |
| phantom-deps | phantom-dep:@floating-ui/vue | AI (phantom-deps): Declared dependency; referenced in config, stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:@scalar/json-magic | AI (phantom-deps): Same-org scoped dependency; declared and re-exported, stable pattern. | ai | |
| phantom-deps | phantom-dep:@scalar/object-utils | AI (phantom-deps): Same-org scoped dependency; declared and re-exported, stable pattern. | ai | |
| phantom-deps | phantom-dep:js-base64 | AI (phantom-deps): Declared dependency; referenced in config, stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:type-fest | AI (phantom-deps): Declared dependency; referenced in config, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/browser-67K6wmG9.js | AI (source-diff): Vite-bundled browser standalone chunk with standard minification; stable pattern for this package. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New standalone ESM build target adds expected browser bundle chunks. | ai | |
| source-diff | obfuscated-file:dist/browser/chunks/AgentScalarChatInterface-DIIVMX31.js | AI (source-diff): Vite-bundled browser standalone chunk with standard minification; stable pattern for this package. | ai | |
| dependencies | unvetted-dep:@scalar/icons | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/workspace-store | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/themes | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/sidebar | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/oas-utils | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/use-hooks | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/agent-chat | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/api-client | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/components | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai | |
| dependencies | unvetted-dep:@scalar/use-toasts | AI (dependencies): Same scalar monorepo; legitimate sibling dep. | ai |
Versions (showing 61 of 61)
| Version | Deps | Published |
|---|---|---|
| 1.58.0 | 24 / 18 | |
| 1.57.5 | 24 / 18 | |
| 1.57.4 | 24 / 18 | |
| 1.57.3 | 24 / 18 | |
| 1.57.2 | 24 / 18 | |
| 1.57.1 | 24 / 18 | |
| 1.57.0 | 24 / 18 | |
| 1.55.2 | 22 / 18 | |
| 1.55.0 | 23 / 17 | |
| 1.54.0 | 23 / 17 | |
| 1.53.1 | 23 / 17 | |
| 1.53.0 | 23 / 17 | |
| 1.52.6 | 23 / 17 | |
| 1.52.5 | 23 / 17 | |
| 1.52.4 | 23 / 17 | |
| 1.52.3 | 23 / 17 | |
| 1.52.2 | 23 / 16 | |
| 1.52.1 | 23 / 16 | |
| 1.52.0 | 23 / 16 | |
| 1.51.0 | 23 / 16 | |
| 1.50.0 | 23 / 16 | |
| 1.49.8 | 24 / 16 | |
| 1.49.7 | 24 / 18 | |
| 1.48.6 | 24 / 19 | |
| 1.43.5 | 30 / 21 | |
| 1.39.0 | 30 / 21 | |
| 1.36.1 | 30 / 21 | |
| 1.36.0 | 30 / 21 | |
| 1.34.5 | 27 / 21 | |
| 1.34.4 | 27 / 21 | |
| 1.34.1 | 26 / 21 | |
| 1.34.0 | 26 / 21 | |
| 1.33.0 | 26 / 17 | |
| 1.32.10 | 26 / 17 | |
| 1.32.9 | 26 / 17 | |
| 1.32.8 | 26 / 17 | |
| 1.32.7 | 26 / 17 | |
| 1.32.6 | 26 / 17 | |
| 1.32.5 | 25 / 17 | |
| 1.32.4 | 25 / 17 | |
| 1.32.1 | 25 / 17 | |
| 1.32.0 | 25 / 17 | |
| 1.31.12 | 25 / 17 | |
| 1.31.11 | 25 / 17 | |
| 1.31.9 | 25 / 17 | |
| 1.31.6 | 25 / 17 | |
| 1.31.4 | 24 / 17 | |
| 1.31.2 | 23 / 17 | |
| 1.31.1 | 23 / 17 | |
| 1.31.0 | 23 / 17 | |
| 1.30.0 | 23 / 18 | |
| 1.29.3 | 23 / 18 | |
| 1.29.2 | 23 / 18 | |
| 1.29.1 | 23 / 18 | |
| 1.28.34 | 23 / 18 | |
| 1.28.32 | 23 / 13 | |
| 1.28.31 | 23 / 13 | |
| 1.28.30 | 23 / 13 | |
| 1.28.29 | 23 / 13 | |
| 1.28.28 | 23 / 13 | |
| 1.28.27 | 23 / 13 |
v1.58.0
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.57.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.57.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.57.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.57.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.57.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.57.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.55.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.55.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.54.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.53.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.53.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.52.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.52.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.52.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.52.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.52.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.52.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.52.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.51.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.50.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.49.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.49.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.48.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.43.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.39.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.36.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.36.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.34.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.34.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.34.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.34.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.33.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.5
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.32.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.31.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.31.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.31.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.31.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.31.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.31.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.31.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.31.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.30.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.29.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.29.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.29.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.34
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.32
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.31
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.30
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.29
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.28
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.28.27
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.