pi-mcp-adapter
MCP (Model Context Protocol) adapter extension for Pi coding agent
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): Keyring/strip-json-comments are legitimate, well-known deps matching adapter's OAuth/config needs. | ai | |
| phantom-deps | phantom-dep:@modelcontextprotocol/sdk | AI (phantom-deps): Official MCP SDK dep, core to package's stated function as an MCP adapter. | ai | |
| dependencies | unvetted-dep:@modelcontextprotocol/client | AI (dependencies): Official MCP org package, replaces prior @modelcontextprotocol/sdk usage. | ai | |
| source-diff | obfuscated-file:app-bridge.bundle.js | AI (source-diff): app-bridge.bundle.js is a minified bundle of the zod library (v4), as evidenced by the full Zod API export map in the sample. Standard build artifact, not malicious obfuscation. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): execSync is used in install.js, the package's explicit CLI binary for setup — not an auto-run postinstall hook. Consistent with a legitimate installer tool fetching from a known GitHub URL. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Raw IP 127.0.0.1 is localhost used for OAuth callback server — standard local OAuth flow pattern, not a malicious external endpoint. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Reflect.get in app-bridge.bundle.js is standard bundler output (esbuild/rollup minification), not intentional obfuscation. Code is clearly Zod schema logic. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Decoding content.blob from base64 is standard blob/binary content handling in a UI resource handler, not payload obfuscation. | ai | |
| semgrep | semgrep:env-bulk-read | AI (semgrep): Iterating process.env to pass environment to child MCP server processes is expected behavior for an MCP adapter/server-manager. | ai |
Versions (showing 39 of 39)
| Version | Deps | Published |
|---|---|---|
| 2.13.0 | 10 / 12 | |
| 2.12.1 | 8 / 12 | |
| 2.12.0 | 7 / 12 | |
| 2.11.0 | 8 / 7 | |
| 2.10.0 | 8 / 7 | |
| 2.9.0 | 8 / 7 | |
| 2.8.0 | 8 / 7 | |
| 2.7.0 | 8 / 7 | |
| 2.6.1 | 7 / 7 | |
| 2.6.0 | 7 / 7 | |
| 2.5.4 | 6 / 6 | |
| 2.5.3 | 6 / 6 | |
| 2.5.2 | 6 / 6 | |
| 2.5.1 | 6 / 6 | |
| 2.5.0 | 6 / 6 | |
| 2.4.2 | 5 / 6 | |
| 2.4.1 | 5 / 6 | |
| 2.4.0 | 5 / 6 | |
| 2.3.5 | 5 / 6 | |
| 2.3.4 | 5 / 6 | |
| 2.3.3 | 5 / 6 | |
| 2.3.2 | 5 / 6 | |
| 2.2.2 | 4 / 3 | |
| 2.2.1 | 4 / 3 | |
| 2.2.0 | 4 / 3 | |
| 2.1.2 | 2 / 3 | |
| 2.1.1 | 2 / 3 | |
| 2.1.0 | 2 / 3 | |
| 2.0.1 | 2 / 3 | |
| 2.0.0 | 2 / 3 | |
| 1.5.1 | 2 / 3 | |
| 1.5.0 | 2 / 3 | |
| 1.4.1 | 2 / 3 | |
| 1.4.0 | 2 / 3 | |
| 1.3.0 | 2 / 3 | |
| 1.2.2 | 2 / 3 | |
| 1.2.1 | 2 / 3 | |
| 1.2.0 | 2 / 3 | |
| 1.1.0 | 2 / 3 |
v2.13.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.12.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.12.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.11.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.