← Home

@vibe-agent-toolkit/gateway-mcp

npm Repository Homepage
36
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

jeffrdutton

Keywords

mcpmodel-context-protocolagentsvat

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@vibe-agent-toolkit/utils AI (phantom-deps): Same-org monorepo package; likely re-exported or used indirectly via sibling packages. ai
phantom-deps phantom-dep:@vibe-agent-toolkit/vat-example-cat-agents AI (phantom-deps): Same-org example package; likely referenced indirectly in this gateway package. ai
phantom-deps phantom-dep:zod AI (phantom-deps): zod is a declared runtime dependency; phantom-dep fires on config/type usage patterns, stable false positive for this package. ai

Versions (showing 36 of 36)

Version Deps Published
0.1.40 3 / 5
0.1.39 3 / 5
0.1.38 3 / 5
0.1.37 3 / 5
0.1.36 3 / 5
0.1.35 3 / 5
0.1.34 3 / 5
0.1.33 3 / 5
0.1.32 3 / 5
0.1.31 3 / 5
0.1.30 3 / 5
0.1.29 3 / 5
0.1.28 3 / 5
0.1.27 3 / 5
0.1.26 3 / 5
0.1.25 3 / 5
0.1.24 3 / 5
0.1.23 3 / 5
0.1.22 3 / 5
0.1.21 3 / 5
0.1.20 3 / 5
0.1.19 3 / 5
0.1.18 3 / 5
0.1.15 3 / 5
0.1.14 4 / 5
0.1.13 4 / 5
0.1.12 4 / 5
0.1.11 4 / 5
0.1.9 5 / 4
0.1.8 5 / 4
0.1.7 5 / 4
0.1.6 5 / 4
0.1.5 5 / 4
0.1.4 5 / 4
0.1.3 5 / 4
0.1.2 5 / 4

v0.1.40

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.39

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.