@aboutcircles/sdk-core
Circles Contracts wrapper
37
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
shrnkldmaxgnosisjaensen_gno
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/index-gr0r7678.js | AI (source-diff): Bun bundler output with --minify flag; content is recognizable noble-hashes crypto library, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-qgge9fmn.js | AI (source-diff): Minified bun build output with --splitting; sample shows noble-hashes MIT code, not obfuscation. | ai | |
| publish-pattern | rapid-publish | AI (publish-pattern): CI/CD automated publishing pipeline; rapid publishes are expected for this package. | ai | |
| source-diff | obfuscated-file:dist/index-dfk1rv00.js | AI (source-diff): Minified bundle produced by bun build --minify; consistent with package.json build script across versions. | ai | |
| source-diff | obfuscated-file:dist/index-n03c1rfp.js | AI (source-diff): Minified output from bun build --minify; content is noble-hashes crypto library, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/index-3z1asv8t.js | AI (source-diff): Minified bundle produced by bun build --minify as declared in package.json build script; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-fda90yjh.js | AI (source-diff): Minified output from bun build --minify; expected artifact for this package's build pipeline. | ai |
Versions (showing 37 of 37)
| Version | Deps | Published |
|---|---|---|
| 0.1.57 | 4 / 4 | |
| 0.1.56 | 4 / 4 | |
| 0.1.55 | 4 / 4 | |
| 0.1.54 | 4 / 4 | |
| 0.1.53 | 4 / 4 | |
| 0.1.52 | 4 / 4 | |
| 0.1.51 | 4 / 4 | |
| 0.1.50 | 4 / 4 | |
| 0.1.49 | 4 / 4 | |
| 0.1.48 | 4 / 4 | |
| 0.1.47 | 4 / 4 | |
| 0.1.46 | 4 / 4 | |
| 0.1.45 | 4 / 4 | |
| 0.1.44 | 4 / 4 | |
| 0.1.43 | 4 / 4 | |
| 0.1.42 | 4 / 4 | |
| 0.1.41 | 4 / 4 | |
| 0.1.40 | 4 / 4 | |
| 0.1.39 | 4 / 4 | |
| 0.1.38 | 4 / 4 | |
| 0.1.37 | 4 / 4 | |
| 0.1.36 | 4 / 4 | |
| 0.1.35 | 4 / 4 | |
| 0.1.34 | 4 / 4 | |
| 0.1.33 | 4 / 4 | |
| 0.1.32 | 4 / 4 | |
| 0.1.31 | 4 / 4 | |
| 0.1.30 | 4 / 4 | |
| 0.1.29 | 4 / 4 | |
| 0.1.28 | 4 / 4 | |
| 0.1.27 | 4 / 4 | |
| 0.1.26 | 4 / 4 | |
| 0.1.24 | 4 / 4 | |
| 0.1.23 | 4 / 4 | |
| 0.1.2 | 4 / 4 | |
| 0.1.1 | 4 / 4 | |
| 0.1.0 | 4 / 4 |
v0.1.42
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.