@sentry/warden
Event-driven agent that reacts to GitHub events and executes skills via Claude Code SDK
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:coverage/lcov-report/prettify.js | AI (source-diff): prettify.js is the standard lcov coverage report syntax highlighter; minified by design, not malicious. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): Established Sentry/Functional Software publisher; 0.0.0 is an intentional initial release, not a throwaway malicious package. | ai | |
| phantom-deps | phantom-dep:ink-spinner | AI (phantom-deps): ink-spinner is listed in package.json dependencies; phantom-dep is a false positive for this package. | ai | |
| license | uncommon-license:FSL-1.1-ALv2 | AI (license): FSL-1.1-ALv2 is Sentry's standard license across their packages; stable for this publisher. | ai |
Versions (showing 51 of 51)
| Version | Deps | Published |
|---|---|---|
| 0.43.0 | 20 / 0 | |
| 0.42.0 | 20 / 0 | |
| 0.41.0 | 19 / 0 | |
| 0.40.0 | 19 / 0 | |
| 0.39.0 | 19 / 0 | |
| 0.38.1 | 19 / 0 | |
| 0.38.0 | 19 / 0 | |
| 0.37.0 | 19 / 0 | |
| 0.36.1 | 19 / 0 | |
| 0.36.0 | 19 / 0 | |
| 0.35.1 | 19 / 0 | |
| 0.35.0 | 19 / 0 | |
| 0.34.0 | 19 / 11 | |
| 0.33.1 | 20 / 12 | |
| 0.33.0 | 20 / 12 | |
| 0.32.0 | 20 / 12 | |
| 0.31.0 | 20 / 13 | |
| 0.30.0 | 20 / 10 | |
| 0.29.1 | 20 / 10 | |
| 0.29.0 | 20 / 10 | |
| 0.28.0 | 18 / 10 | |
| 0.27.0 | 18 / 10 | |
| 0.26.2 | 18 / 10 | |
| 0.26.1 | 18 / 10 | |
| 0.26.0 | 18 / 10 | |
| 0.25.0 | 18 / 10 | |
| 0.24.1 | 18 / 10 | |
| 0.24.0 | 18 / 10 | |
| 0.23.0 | 18 / 10 | |
| 0.22.0 | 17 / 12 | |
| 0.21.0 | 17 / 12 | |
| 0.20.0 | 17 / 12 | |
| 0.19.0 | 17 / 12 | |
| 0.18.0 | 17 / 12 | |
| 0.17.0 | 17 / 12 | |
| 0.16.0 | 17 / 12 | |
| 0.15.0 | 17 / 12 | |
| 0.14.0 | 17 / 12 | |
| 0.13.0 | 17 / 12 | |
| 0.12.0 | 17 / 12 | |
| 0.11.0 | 17 / 12 | |
| 0.10.0 | 17 / 12 | |
| 0.9.0 | 16 / 12 | |
| 0.8.0 | 16 / 12 | |
| 0.7.0 | 16 / 12 | |
| 0.6.0 | 15 / 12 | |
| 0.5.0 | 15 / 12 | |
| 0.4.0 | 15 / 12 | |
| 0.3.0 | 14 / 12 | |
| 0.2.0 | 14 / 12 | |
| 0.0.0 | 13 / 12 |
v0.43.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.42.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.41.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.40.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.39.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.