← Home

@bitgo/sdk-api

npm Repository Homepage

REST wrapper for BitGoJS

100
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

louib-bitgobitgobot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/src/encryptV2.js AI (source-diff): Readable new AES-GCM/Argon2 encryption source; long lines from TS boilerplate, not obfuscation. ai
source-diff obfuscated-file:dist/src/encryptionSession.js AI (source-diff): Readable new encryption session source; long lines from TS boilerplate, not obfuscation. ai
source-diff obfuscated-file:dist/test/unit/hmacStrategy.js AI (source-diff): Compiled TypeScript test file for HMAC strategy; readable mock/test code. ai
maintainer-change maintainer-removed AI (maintainer-change): Previous maintainers replaced by org bot; consistent with BitGo's publishing automation pattern. ai
provenance publisher-changed AI (provenance): Publisher change to bitgobot is org-level automation, not an account compromise. ai
source-diff obfuscated-file:dist/test/unit/v1/fixtures/accelerate-tx.js AI (source-diff): Long lines are raw Bitcoin transaction hex in test fixtures, not obfuscation; standard compiled TS test output. ai
source-diff obfuscated-file:dist/test/unit/bitgoAPI.js AI (source-diff): Compiled TypeScript test file; not obfuscated. ai
source-diff obfuscated-file:dist/test/unit/encrypt.js AI (source-diff): Compiled TypeScript test file with readable encryption test logic; not obfuscated. ai
source-diff obfuscated-file:dist/test/unit/utils.js AI (source-diff): Compiled TypeScript test file with readable utility test logic; not obfuscated. ai
source-diff obfuscated-file:dist/test/unit/v1/wallet.js AI (source-diff): Compiled TypeScript wallet test file; long lines are test fixture data, not obfuscation. ai
source-diff obfuscated-file:dist/test/unit/api.js AI (source-diff): Compiled TypeScript test file with readable test logic; long lines are standard TS boilerplate. ai
maintainer-change maintainer-takeover AI (maintainer-change): bitgobot is BitGo's own automation account with strong approval track record; consolidation under bot publisher is expected for this org. ai
maintainer-change maintainer-added AI (maintainer-change): bitgobot addition is part of BitGo's org-wide publisher consolidation, not a hostile takeover. ai
phantom-deps phantom-dep:proxy-agent AI (phantom-deps): proxy-agent is listed in browser field as false (browser shim exclusion) and declared as a runtime dep; phantom detection is a false positive here. ai
phantom-deps phantom-dep:@types/superagent AI (phantom-deps): @types/superagent is a type declaration package loaded by TypeScript convention, not directly imported at runtime. ai

Versions (showing 100 of 140)

Version Deps Published
1.81.1 17 / 0
1.81.0 17 / 0
1.80.1 17 / 0
1.80.0 17 / 0
1.79.2 17 / 0
1.79.1 17 / 0
1.79.0 17 / 0
1.78.0 17 / 0
1.77.0 15 / 0
1.76.3 15 / 0
1.76.2 15 / 0
1.76.1 15 / 0
1.76.0 15 / 0
1.75.5 15 / 0
1.75.4 15 / 0
1.75.3 15 / 0
1.75.2 15 / 0
1.75.1 15 / 0
1.75.0 15 / 0
1.74.1 15 / 0
1.74.0 15 / 0
1.73.4 15 / 0
1.73.3 15 / 0
1.73.1 15 / 0
1.73.0 15 / 0
1.72.2 15 / 0
1.72.1 15 / 0
1.72.0 15 / 0
1.71.9 15 / 0
1.71.8 15 / 0
1.71.7 15 / 0
1.71.6 15 / 0
1.71.5 15 / 0
1.71.4 15 / 0
1.71.3 15 / 0
1.71.2 15 / 0
1.71.1 15 / 0
1.71.0 15 / 0
1.70.4 15 / 0
1.70.3 15 / 0
1.70.2 15 / 0
1.70.1 15 / 0
1.70.0 15 / 0
1.69.2 15 / 0
1.69.1 15 / 0
1.69.0 15 / 0
1.68.3 15 / 0
1.68.2 15 / 0
1.68.1 15 / 0
1.68.0 15 / 0
1.67.0 15 / 0
1.66.3 15 / 0
1.66.2 15 / 0
1.66.1 15 / 0
1.66.0 15 / 0
1.65.4 15 / 0
1.65.3 15 / 0
1.65.2 15 / 0
1.65.1 15 / 0
1.65.0 15 / 0
1.64.4 15 / 0
1.64.3 15 / 0
1.64.2 15 / 0
1.64.1 15 / 0
1.64.0 15 / 0
1.63.5 15 / 0
1.63.4 15 / 0
1.63.3 15 / 0
1.63.2 15 / 0
1.63.1 15 / 0
1.63.0 15 / 0
1.62.3 15 / 0
1.62.2 15 / 0
1.62.1 15 / 0
1.62.0 15 / 0
1.61.5 15 / 0
1.61.4 15 / 0
1.61.3 15 / 0
1.61.2 16 / 0
1.61.1 16 / 0
1.61.0 16 / 0
1.60.0 16 / 0
1.59.0 16 / 0
1.58.9 16 / 0
1.58.8 16 / 0
1.58.7 16 / 0
1.58.6 16 / 0
1.58.5 16 / 0
1.58.4 16 / 0
1.58.3 16 / 0
1.58.2 16 / 0
1.58.1 16 / 0
1.58.0 16 / 0
1.57.6 15 / 0
1.57.5 15 / 0
1.57.4 15 / 0
1.57.3 15 / 0
1.57.1 15 / 0
1.57.0 15 / 0
1.56.8 16 / 0
Showing 100 of 140 Next page →

v1.62.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.62.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.61.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.61.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.61.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.61.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.61.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.61.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.60.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.59.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.58.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.57.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.57.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.57.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.57.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.57.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.57.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.56.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.