← Home

agent-base

Turn a function into an `http.Agent` instance

33
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tootallnate

Keywords

httpagentbasebareboneshttps

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): Migration to GitHub Actions CI/CD publishing drops gitHead; SLSA provenance attestation compensates as stronger integrity signal. ai
provenance publisher-changed AI (provenance): Publisher changed from personal account to GitHub Actions CI/CD — a security improvement confirmed by SLSA provenance attestation. ai
publish-pattern dormant-publish AI (publish-pattern): Mature package with 171M weekly downloads; 246-day gap before a major version bump is normal for stable infrastructure packages. ai
phantom-deps phantom-dep:debug AI (phantom-deps): debug is a declared runtime dependency; phantom-dep flag is a false positive for this package as it may be used indirectly or via type references. ai
dependencies unvetted-dep:debug AI (dependencies): debug is a well-known, widely-used npm package with no security concerns; stable accept for this package. ai

Versions (showing 33 of 33)

Version Deps Published
9.0.0 0 / 8
8.0.0 0 / 8
7.1.4 0 / 11
7.1.3 0 / 11
7.1.2 1 / 11
7.1.1 1 / 11
7.1.0 1 / 11
7.0.2 1 / 11
7.0.1 1 / 11
7.0.0 1 / 11
6.0.2 1 / 21
6.0.1 1 / 21
6.0.0 1 / 19
5.1.1 0 / 18
5.1.0 0 / 18
5.0.0 1 / 19
4.3.0 1 / 4
4.2.1 1 / 2
4.2.0 1 / 2
4.1.2 1 / 2
4.1.1 1 / 2
4.1.0 1 / 2
4.0.1 1 / 2
4.0.0 1 / 2
3.0.0 3 / 2
2.1.1 2 / 2
2.1.0 2 / 2
2.0.1 2 / 1
2.0.0 2 / 1
1.0.2 0 / 1
1.0.1 0 / 1
1.0.0 0 / 1
0.0.1 0 / 1