← Home

@theia/ai-vercel-ai

npm Repository Homepage

Theia - Vercel AI SDK Integration

20
Versions
EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

eclipsetheiavince-fugnittobhufmannmarc.dumaispaul-marechalmsujewtsmaederjfaltermeierjhelmingeclipse-theia-botsgrabandndoschek

Keywords

theia-extension

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-added AI (maintainer-change): ndoschek is an established Theia org publisher with 221 approved packages; routine maintainer rotation within the eclipse-theia project. ai
dependencies unvetted-dep:@theia/core AI (dependencies): Sibling package in the Eclipse Theia monorepo; same publisher and release cadence, not an independent risk. ai
phantom-deps phantom-dep:@theia/workspace AI (phantom-deps): Same-org monorepo dep; declared for transitive wiring, not direct import — stable false positive for this package. ai
phantom-deps phantom-dep:@theia/filesystem AI (phantom-deps): Same-org monorepo dep; declared for transitive wiring, not direct import — stable false positive for this package. ai

Versions (showing 20 of 20)

Version Deps Published
1.73.1 9 / 1
1.73.0 9 / 1
1.72.3 9 / 1
1.72.2 9 / 1
1.72.1 9 / 1
1.72.0 9 / 1
1.71.2 9 / 1
1.70.2 9 / 1
1.69.0 9 / 1
1.68.1 9 / 1
1.68.0 9 / 1
1.67.0 9 / 1
1.66.2 9 / 1
1.66.0 9 / 1
1.65.2 9 / 1
1.64.2 9 / 1
1.64.1 9 / 1
1.64.0 9 / 1
1.63.0 9 / 1
1.62.1 9 / 1

v1.73.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.