Supply chain
registry metadata reported
Supply chain: npm packages that run install-lifecycle scripts (code on install) or have been deprecated upstream, alongside ecosystem provenance coverage — review signals inferred from registry metadata, not verdicts.
- with provenance 1579
36% of 4346 npm + PyPI servers carry a build-provenance attestation (recorded as present; signature not re-verified).
- @hasna/machines install hooks deprecated no provenance
- @aashari/mcp-server-atlassian-bitbucket install hooks
- @aashari/mcp-server-atlassian-confluence install hooks no provenance
- @aashari/mcp-server-atlassian-jira install hooks no provenance
- @aerostack/gateway install hooks no provenance
- @agentprojectcontext/apx install hooks no provenance
- @ainative/cody-cli install hooks no provenance
- @aionlabsai/aion install hooks no provenance
- @askexenow/exe-os install hooks no provenance
- @azure/mcp install hooks no provenance
- @bike4mind/cli install hooks no provenance
- @ceraph/react-native-mcp install hooks no provenance
- @coinbase/cdp-cli install hooks no provenance
- @comment-io/cli install hooks no provenance
- @drawio/mcp install hooks no provenance
- @emend-ai/utim install hooks no provenance
- @hasna/connectors install hooks no provenance
- @hasna/conversations install hooks no provenance
- @hasna/domains install hooks no provenance
- @hasna/files install hooks no provenance
- @hasna/logs install hooks no provenance
- @hasna/mementos install hooks no provenance
- @hasna/projects install hooks no provenance
- @hasna/prompts install hooks no provenance
- @hasna/sessions install hooks no provenance