@treeseed/agent
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778900516495-zut48am17ij.js | AI (source-diff): Temp build script artifact with readable TS/esbuild code; long lines from bundled output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778896355021-i8m8hf11ewf.js | AI (source-diff): Temp esbuild artifact from TypeScript build pipeline; content is readable build tooling, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778885982330-pyljea0xcw.js | AI (source-diff): Temp build artifact with readable TS/esbuild source; long lines from bundled imports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778898185074-1ea33s71v1k.js | AI (source-diff): Temp build artifact with readable TS/esbuild compilation code; long lines from bundled output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778834868334-8jzs09l73w8.js | AI (source-diff): Bundled build/compile script (esbuild+TypeScript); long lines are minified tooling output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778877303748-hc6e48x2ffd.js | AI (source-diff): Temp build script artifact with readable TS/esbuild source; long lines from bundled code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778746587666-7bxejgk4f3v.js | AI (source-diff): Temp build script artifact with readable esbuild/TS source; long lines from bundled imports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778693591073-99tjj8tk25a.js | AI (source-diff): Temp build artifact from ts-run tooling; readable esbuild/TS compilation code, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778729085748-ekoqe86s8nu.js | AI (source-diff): Temp ts-run build artifact with readable esbuild/TS tooling code; long lines from bundled output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778570722415-o6vufmexc3.js | AI (source-diff): Bundled build tooling script (esbuild/tsc); long lines from bundling, not obfuscation. Readable source confirms benign content. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778523718268-eg22qut2mk7.js | AI (source-diff): Bundled build script (esbuild output); readable source, not malicious obfuscation. Pattern will recur with each build. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778487657087-47rihuztkz3.js | AI (source-diff): Temp esbuild bundle of build scripts; readable TS source, not obfuscated malware. Pattern is stable for this package. | ai | |
| source-diff | obfuscated-file:dist/scripts/.ts-run-1778474003306-tplfb7du22.js | AI (source-diff): Temp esbuild artifact with readable build-tool source; long lines from bundling, not obfuscation. | ai |
Versions (showing 91 of 91)
| Version | Deps | Published |
|---|---|---|
| 0.12.58 | 7 / 3 | |
| 0.12.57 | 7 / 3 | |
| 0.12.56 | 7 / 3 | |
| 0.12.55 | 7 / 3 | |
| 0.12.54 | 7 / 3 | |
| 0.12.52 | 7 / 3 | |
| 0.12.51 | 7 / 3 | |
| 0.12.50 | 7 / 3 | |
| 0.12.49 | 7 / 3 | |
| 0.12.48 | 7 / 3 | |
| 0.12.47 | 7 / 3 | |
| 0.12.46 | 7 / 3 | |
| 0.12.45 | 7 / 3 | |
| 0.12.44 | 7 / 3 | |
| 0.12.43 | 7 / 3 | |
| 0.12.42 | 7 / 3 | |
| 0.12.41 | 7 / 3 | |
| 0.12.40 | 7 / 3 | |
| 0.12.39 | 7 / 3 | |
| 0.12.38 | 7 / 3 | |
| 0.12.37 | 7 / 3 | |
| 0.12.36 | 7 / 3 | |
| 0.12.35 | 7 / 3 | |
| 0.12.34 | 7 / 3 | |
| 0.12.33 | 7 / 3 | |
| 0.12.32 | 7 / 3 | |
| 0.12.31 | 7 / 3 | |
| 0.12.30 | 7 / 3 | |
| 0.12.29 | 7 / 3 | |
| 0.12.28 | 7 / 3 | |
| 0.12.27 | 7 / 3 | |
| 0.12.26 | 7 / 3 | |
| 0.12.25 | 7 / 3 | |
| 0.12.24 | 7 / 3 | |
| 0.12.23 | 7 / 3 | |
| 0.12.22 | 7 / 3 | |
| 0.12.21 | 7 / 3 | |
| 0.12.20 | 7 / 3 | |
| 0.12.19 | 7 / 3 | |
| 0.12.18 | 7 / 3 | |
| 0.12.17 | 7 / 3 | |
| 0.12.16 | 7 / 3 | |
| 0.12.15 | 7 / 3 | |
| 0.12.14 | 7 / 3 | |
| 0.12.13 | 7 / 3 | |
| 0.12.12 | 7 / 3 | |
| 0.12.11 | 7 / 3 | |
| 0.12.10 | 7 / 3 | |
| 0.12.9 | 7 / 3 | |
| 0.12.8 | 7 / 3 | |
| 0.12.7 | 7 / 3 | |
| 0.11.0 | 6 / 2 | |
| 0.10.21 | 6 / 2 | |
| 0.10.20 | 6 / 2 | |
| 0.10.19 | 6 / 2 | |
| 0.10.18 | 6 / 2 | |
| 0.10.17 | 6 / 2 | |
| 0.10.16 | 6 / 2 | |
| 0.10.15 | 6 / 2 | |
| 0.10.14 | 6 / 2 | |
| 0.10.13 | 6 / 2 | |
| 0.10.12 | 6 / 2 | |
| 0.10.11 | 6 / 2 | |
| 0.10.10 | 6 / 2 | |
| 0.10.9 | 6 / 2 | |
| 0.10.8 | 6 / 2 | |
| 0.10.7 | 6 / 2 | |
| 0.10.6 | 6 / 2 | |
| 0.10.5 | 6 / 2 | |
| 0.10.4 | 6 / 2 | |
| 0.10.3 | 6 / 2 | |
| 0.10.2 | 6 / 2 | |
| 0.10.1 | 6 / 2 | |
| 0.10.0 | 6 / 2 | |
| 0.9.3 | 6 / 2 | |
| 0.9.0 | 6 / 2 | |
| 0.8.19 | 6 / 2 | |
| 0.8.18 | 6 / 2 | |
| 0.8.17 | 6 / 2 | |
| 0.8.16 | 6 / 2 | |
| 0.8.15 | 6 / 2 | |
| 0.8.14 | 6 / 2 | |
| 0.8.13 | 6 / 2 | |
| 0.8.12 | 6 / 2 | |
| 0.8.11 | 6 / 2 | |
| 0.8.10 | 5 / 2 | |
| 0.8.9 | 5 / 2 | |
| 0.8.8 | 5 / 2 | |
| 0.8.7 | 5 / 2 | |
| 0.8.6 | 5 / 2 | |
| 0.8.5 | 5 / 2 |
v0.12.58
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.57
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.56
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.55
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.54
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.52
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.51
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.50
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.49
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.48
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.47
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.46
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.45
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.44
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.43
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.42
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.41
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.40
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.39
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.38
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.37
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.36
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.35
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.34
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.33
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.32
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.31
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.30
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.29
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.28
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.27
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.26
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.25
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.24
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.23
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.19
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.18
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.12.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.