← Home

@sylphai/adal-cli

npm Repository Homepage

AI-powered CLI for development and research tasks

20
Versions
SylphAI Proprietary
License
Yes
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ricardozhangliyin_1aria2025

Keywords

aiclidevelopmentresearchassistant

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-removed AI (maintainer-change): Package is published via GitHub Actions CI/CD; maintainer list changes reflect automation, not a takeover. ai
publish-pattern rapid-publish AI (publish-pattern): Automated CI/CD pipeline explains rapid successive publishes across platform-specific packages. ai
install-scripts install-script:postinstall AI (install-scripts): Postinstall sets up platform-specific binary cache; consistent with optional dep pattern across 5 platforms. ai
semgrep semgrep:child-process-import AI (semgrep): CLI tool using child_process to spawn subprocesses is expected and documented behavior. ai

Versions (showing 20 of 20)

Version Deps Published
1.5.2 0 / 0
1.4.5 0 / 0
1.2.2 0 / 0
1.2.0 0 / 0
1.1.4 0 / 0
1.1.3 0 / 0
1.1.2 0 / 0
1.1.1 0 / 0
1.0.9 0 / 0
1.0.8 0 / 0
1.0.7 0 / 0
1.0.6 0 / 0
1.0.5 0 / 0
1.0.3 0 / 0
1.0.2 0 / 0
1.0.1 0 / 0
0.2.1 0 / 0
0.2.0 0 / 0
0.1.3 0 / 0
0.1.1 0 / 0

v1.5.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.4.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.