@aztec/bot
Simple bot that connects to a PXE to send txs on a recurring basis.
6
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
zac-williamsonleilawangcharlielyejaosefjoss-aztecprotocolludamad
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:source-map-support | AI (phantom-deps): source-map-support is a standard TypeScript/Node.js helper referenced in config files; benign phantom dep pattern. | ai | |
| dependencies | unvetted-dep:@aztec/wallets | AI (dependencies): Same-org @aztec monorepo dependency; all @aztec packages are co-versioned and part of the same legitimate project. | ai | |
| dependencies | unvetted-dep:@aztec/aztec.js | AI (dependencies): Same-org @aztec monorepo dependency; co-versioned internal package from the Aztec Protocol project. | ai | |
| dependencies | unvetted-dep:@aztec/noir-protocol-circuits-types | AI (dependencies): Same-org @aztec monorepo dependency; co-versioned internal package from the Aztec Protocol project. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a standard TypeScript runtime helper; phantom detection is a known false positive for TypeScript monorepos. | ai | |
| phantom-deps | phantom-dep:@aztec/entrypoints | AI (phantom-deps): Same-org @aztec package; phantom detection in monorepo context is a known false positive. | ai | |
| typosquat | typosquat.levenshtein:koa | AI (typosquat): @aztec/bot is a scoped package in the legitimate Aztec Protocol org. Levenshtein match to 'koa' is purely coincidental. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): @aztec/bot is a scoped package in the legitimate Aztec Protocol org. Levenshtein match to 'joi' is purely coincidental. | ai | |
| typosquat | typosquat.levenshtein:zod | AI (typosquat): @aztec/bot is a scoped package in the legitimate Aztec Protocol org. Levenshtein match to 'zod' is purely coincidental. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Missing README/repo/keywords are typical of monorepo sub-packages. The 'inherits' field confirms this pattern. 944 versions and 3.7k weekly downloads confirm legitimacy. | ai | |
| typosquat | typosquat.levenshtein:got | AI (typosquat): @aztec/bot is a scoped package in the legitimate Aztec Protocol org. 'bot' refers to a bot utility, not a typosquat of 'got'. Scoped namespace eliminates impersonation risk. | ai |