rivetkit
Lightweight libraries for building stateful actors on edge platforms
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): Used indirectly via config; heuristic false positive. | ai | |
| dependencies | unvetted-dep:@rivetkit/rivetkit-wasm | AI (dependencies): First-party sibling package pinned to same version. | ai | |
| source-diff | obfuscated-file:dist/tsup/config-BfBhjEbk.d.cts | AI (source-diff): TS declaration file with long type signatures, not obfuscated code. | ai | |
| dependencies | unvetted-dep:@rivetkit/rivetkit-napi | AI (dependencies): First-party sibling package pinned to same version. | ai | |
| phantom-deps | phantom-dep:@hono/standard-validator | AI (phantom-deps): Used indirectly via config/schema generation, not a risk. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Local child-process launcher passing env to spawned engine binary, not exfil. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Standard protocol serialization/deserialization code. | ai | |
| phantom-deps | phantom-dep:@rivetkit/fast-json-patch | AI (phantom-deps): First-party scoped package referenced in config, not a risk. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Localhost (127.0.0.1) in test suite; stable false positive for this package. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Established package with 532 versions; missing description is cosmetic. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): Standard Proxy/Reflect.get pattern for method binding; not obfuscation. | ai | |
| bogus-package | bogus-package | AI (bogus-package): rivetkit is a substantial real framework (591 versions, 30k weekly dl); README/repo-link heuristic is a stable false positive. | ai |
Versions (showing 30 of 30)
| Version | Deps | Published |
|---|---|---|
| 2.3.4 | 20 / 17 | |
| 2.0.42 | 17 / 18 | |
| 2.0.41 | 17 / 18 | |
| 2.0.40 | 17 / 18 | |
| 2.0.39 | 17 / 18 | |
| 2.0.38 | 17 / 18 | |
| 2.0.37 | 17 / 18 | |
| 2.0.36 | 17 / 18 | |
| 2.0.35 | 17 / 18 | |
| 2.0.34 | 17 / 18 | |
| 2.0.33 | 15 / 17 | |
| 2.0.32 | 15 / 17 | |
| 2.0.31 | 15 / 17 | |
| 2.0.30 | 15 / 17 | |
| 2.0.29 | 15 / 17 | |
| 2.0.28 | 15 / 17 | |
| 2.0.27 | 14 / 17 | |
| 2.0.26 | 14 / 17 | |
| 2.0.25 | 14 / 17 | |
| 2.0.24 | 14 / 17 | |
| 2.0.23 | 14 / 15 | |
| 2.0.22 | 14 / 15 | |
| 2.0.21 | 13 / 15 | |
| 2.0.19 | 13 / 14 | |
| 2.0.16 | 13 / 14 | |
| 2.0.6 | 13 / 14 | |
| 2.0.4 | 13 / 14 | |
| 2.0.3 | 12 / 15 | |
| 2.0.2 | 0 / 0 | |
| 2.0.1 | 0 / 0 |
v2.3.4
2 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.42
2 findingsSpreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | // Development environment overrides for Rivet Engine.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.41
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | // Development environment overrides for Rivet Engine.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.40
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | // In development, runners can be terminated without a graceful
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.39
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.38
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.37
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.36
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.35
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.34
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.33
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.32
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.31
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.30
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.29
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.28
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.27
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.26
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.25
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.24
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 95 | cwd: path.dirname(binaryPath), 96 | stdio: ["inherit", "pipe", "pipe"], > 97 | env: { 98 | ...process.env, 99 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.23
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 84 | cwd: path.dirname(binaryPath), 85 | stdio: ["inherit", "pipe", "pipe"], > 86 | env: { 87 | ...process.env, 88 | // In development, runners can be terminated without a graceful
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.22
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 84 | cwd: path.dirname(binaryPath), 85 | stdio: ["inherit", "pipe", "pipe"], > 86 | env: { 87 | ...process.env, 88 | // In development, runners can be terminated without a graceful
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.21
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 83 | cwd: path.dirname(binaryPath), 84 | stdio: ["inherit", "pipe", "pipe"], > 85 | env: { 86 | ...process.env, 87 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.19
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 80 | cwd: path.dirname(binaryPath), 81 | stdio: ["inherit", "pipe", "pipe"], > 82 | env: { 83 | ...process.env, 84 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.16
3 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Spreading entire process.env into an object — may capture all secrets 79 | cwd: path.dirname(binaryPath), 80 | stdio: ["inherit", "pipe", "pipe"], > 81 | env: { 82 | ...process.env, 83 | },
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.6
2 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.4
2 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 2 signal(s), weighted score 3: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere.
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.2
2 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 4 signal(s), weighted score 5: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v2.0.1
2 findings[Reject — re-review on republish] (prior reject: AI (bogus-package): Package is a content-free skeleton across 498 versions; spam/squatting pattern generalizes.) Matched 4 signal(s), weighted score 5: • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_REPO_NO_HOME] No repository, homepage, or bugs URL — genuine packages almost always link somewhere. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.