@bitgo/sdk-coin-arbeth
BitGo SDK coin library for Arbitrum
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-takeover | AI (maintainer-change): bitgobot is BitGo's automation account with 126 approved packages; consolidation from individual maintainers to a bot is expected org practice. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/send.js | AI (source-diff): TypeScript-compiled test file; long lines from transaction hex data. | ai | |
| source-diff | obfuscated-file:dist/test/resources.d.ts | AI (source-diff): TypeScript declaration file for test resources; long lines from exported constant names. | ai | |
| provenance | publisher-changed | AI (provenance): bitgobot is BitGo's CI automation account with 118 approved packages; publisher change is expected org-wide transition. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by newly included compiled test output in dist/test/. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/addressInitialization.js | AI (source-diff): TypeScript-compiled test file with standard boilerplate; long lines from hex test data, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/fixtures/arbeth.js | AI (source-diff): Test fixture file with hex-encoded transaction data; standard compiled TS output. | ai | |
| source-diff | obfuscated-file:dist/test/unit/arbeth.js | AI (source-diff): TypeScript-compiled unit test; long lines from test data, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/unit/arbethToken.js | AI (source-diff): TypeScript-compiled unit test; standard TS boilerplate with test data. | ai | |
| source-diff | obfuscated-file:dist/test/resources.js | AI (source-diff): Test resources file with hex-encoded Ethereum transaction data; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transaction.js | AI (source-diff): TypeScript-compiled unit test; standard TS boilerplate. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transferBuilder.js | AI (source-diff): TypeScript-compiled unit test; standard TS boilerplate. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/walletInitialization.js | AI (source-diff): TypeScript-compiled test file; standard TS boilerplate. | ai | |
| phantom-deps | phantom-dep:@bitgo/secp256k1 | AI (phantom-deps): Same-org dep declared in package.json; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:ethereumjs-util | AI (phantom-deps): Declared as runtime dep; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:ethereumjs-abi | AI (phantom-deps): Declared as runtime dep; phantom-dep heuristic false positive for this package. | ai |
Versions (showing 51 of 154)
| Version | Deps | Published |
|---|---|---|
| 21.12.26 | 7 / 3 | |
| 21.12.25 | 7 / 3 | |
| 21.12.23 | 7 / 3 | |
| 21.12.22 | 7 / 3 | |
| 21.12.21 | 7 / 3 | |
| 21.12.20 | 7 / 3 | |
| 21.12.19 | 7 / 3 | |
| 21.12.18 | 7 / 3 | |
| 21.12.17 | 7 / 3 | |
| 21.12.16 | 7 / 3 | |
| 21.12.15 | 7 / 3 | |
| 21.12.14 | 7 / 3 | |
| 21.12.13 | 7 / 3 | |
| 21.12.12 | 7 / 3 | |
| 21.12.11 | 7 / 3 | |
| 21.12.10 | 7 / 3 | |
| 21.12.9 | 7 / 3 | |
| 21.12.8 | 7 / 3 | |
| 21.12.7 | 7 / 3 | |
| 21.12.6 | 7 / 3 | |
| 21.12.5 | 7 / 3 | |
| 21.12.4 | 7 / 3 | |
| 21.12.3 | 7 / 3 | |
| 21.12.2 | 7 / 3 | |
| 21.12.1 | 7 / 3 | |
| 21.12.0 | 7 / 3 | |
| 21.11.9 | 7 / 3 | |
| 21.11.8 | 7 / 3 | |
| 21.11.7 | 7 / 3 | |
| 21.11.6 | 7 / 3 | |
| 21.11.5 | 7 / 3 | |
| 21.11.4 | 7 / 3 | |
| 21.11.3 | 7 / 3 | |
| 21.11.2 | 7 / 3 | |
| 21.11.1 | 7 / 3 | |
| 21.11.0 | 7 / 3 | |
| 21.10.18 | 7 / 3 | |
| 21.10.16 | 7 / 3 | |
| 21.10.15 | 7 / 3 | |
| 21.10.14 | 7 / 3 | |
| 21.10.13 | 7 / 3 | |
| 21.10.12 | 7 / 3 | |
| 21.10.11 | 7 / 3 | |
| 21.10.10 | 7 / 3 | |
| 21.10.9 | 7 / 3 | |
| 21.10.8 | 7 / 3 | |
| 21.10.7 | 7 / 3 | |
| 21.10.6 | 7 / 3 | |
| 21.10.5 | 7 / 3 | |
| 21.10.4 | 7 / 3 | |
| 21.10.3 | 7 / 3 |
v21.12.26
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.12.25
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.12.23
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.12.22
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.12.21
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v21.12.20
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.