@smartbear/mcp
MCP server for interacting SmartBear Products
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): SmartBear org package; maintainer rotation within the org is expected across versions. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): SmartBear org package; maintainer rotation within the org is expected across versions. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Active development; new files align with added integrations (bugsnag, pactflow, api-hub) per package keywords. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase consistent with new feature modules; no obfuscation or bundled payloads indicated. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): zod is a well-established, widely-used validation library with no known malicious history; low risk for this package. | ai | |
| phantom-deps | phantom-dep:vite | AI (phantom-deps): vite is listed as a runtime dependency and used as a build tool; phantom-dep heuristic misfires here. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped SmartBear package; Levenshtein match to 'yup' is coincidental, not a typosquat. | ai |
Versions (showing 49 of 49)
| Version | Deps | Published |
|---|---|---|
| 0.31.0 | 8 / 11 | |
| 0.30.0 | 8 / 11 | |
| 0.29.0 | 8 / 11 | |
| 0.28.0 | 8 / 10 | |
| 0.27.2 | 8 / 10 | |
| 0.27.1 | 8 / 10 | |
| 0.27.0 | 8 / 10 | |
| 0.26.1 | 8 / 10 | |
| 0.26.0 | 8 / 10 | |
| 0.25.1 | 7 / 10 | |
| 0.25.0 | 7 / 10 | |
| 0.24.0 | 7 / 10 | |
| 0.23.0 | 7 / 10 | |
| 0.22.0 | 7 / 10 | |
| 0.21.1 | 7 / 10 | |
| 0.20.0 | 7 / 10 | |
| 0.19.2 | 7 / 10 | |
| 0.19.0 | 7 / 10 | |
| 0.18.3 | 7 / 10 | |
| 0.18.2 | 7 / 10 | |
| 0.18.1 | 7 / 10 | |
| 0.18.0 | 7 / 10 | |
| 0.17.1 | 7 / 10 | |
| 0.17.0 | 7 / 10 | |
| 0.16.0 | 7 / 10 | |
| 0.15.0 | 6 / 9 | |
| 0.14.1 | 6 / 9 | |
| 0.14.0 | 6 / 9 | |
| 0.13.5 | 6 / 9 | |
| 0.13.4 | 6 / 9 | |
| 0.13.3 | 6 / 9 | |
| 0.13.2 | 6 / 9 | |
| 0.13.1 | 6 / 9 | |
| 0.12.1 | 6 / 9 | |
| 0.12.0 | 6 / 9 | |
| 0.11.0 | 6 / 9 | |
| 0.10.0 | 6 / 9 | |
| 0.9.0 | 6 / 9 | |
| 0.8.0 | 6 / 9 | |
| 0.7.0 | 6 / 9 | |
| 0.6.0 | 6 / 11 | |
| 0.5.0 | 5 / 11 | |
| 0.4.0 | 4 / 9 | |
| 0.3.0 | 4 / 9 | |
| 0.2.2 | 3 / 7 | |
| 0.2.1 | 3 / 7 | |
| 0.2.0 | 3 / 7 | |
| 0.1.1 | 2 / 7 | |
| 0.1.0 | 2 / 7 |
v0.31.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.30.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.29.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.28.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.27.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.27.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.27.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.26.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.