Supply chain
registry metadata reported
Supply chain: npm packages that run install-lifecycle scripts (code on install) or have been deprecated upstream, alongside ecosystem provenance coverage — review signals inferred from registry metadata, not verdicts.
- with provenance 1377
36% of 3845 npm + PyPI servers carry a build-provenance attestation (recorded as present; signature not re-verified).
- @hasna/machines install hooks deprecated no provenance
- @aashari/mcp-server-atlassian-bitbucket install hooks
- @aashari/mcp-server-atlassian-confluence install hooks no provenance
- @aashari/mcp-server-atlassian-jira install hooks no provenance
- @aerostack/gateway install hooks no provenance
- @agentprojectcontext/apx install hooks no provenance
- @ainative/cody-cli install hooks no provenance
- @aionlabsai/aion install hooks no provenance
- @askexenow/exe-os install hooks no provenance
- @azure/mcp install hooks no provenance
- @bike4mind/cli install hooks no provenance
- @coinbase/cdp-cli install hooks no provenance
- @comment-io/cli install hooks no provenance
- @drawio/mcp install hooks no provenance
- @emend-ai/utim install hooks no provenance
- @hasna/connectors install hooks no provenance
- @hasna/conversations install hooks no provenance
- @hasna/domains install hooks no provenance
- @hasna/files install hooks no provenance
- @hasna/mementos install hooks no provenance
- @hasna/projects install hooks no provenance
- @hasna/prompts install hooks no provenance
- @hasna/sessions install hooks no provenance
- @hasna/todos install hooks no provenance
- @henkey/postgres-mcp-server install hooks no provenance