@bitgo/sdk-coin-atom
BitGo SDK coin library for Cosmos
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-takeover | AI (maintainer-change): bitgobot is BitGo's automation account with 498 approved packages; consistent with org-wide pipeline migration. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/transactionBuilder.js | AI (source-diff): Compiled TypeScript unit test; standard tsc output pattern. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/transferBuilder.js | AI (source-diff): Compiled TypeScript unit test; standard tsc output pattern. | ai | |
| source-diff | obfuscated-file:dist/test/unit/utils.js | AI (source-diff): Compiled TypeScript unit test; standard tsc output pattern. | ai | |
| source-diff | obfuscated-file:dist/test/resources/atom.js | AI (source-diff): Compiled TypeScript test fixture; long lines are base64 test vectors, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/unit/atom.js | AI (source-diff): Standard tsc-compiled unit test output; readable test logic visible in sample. | ai | |
| source-diff | obfuscated-file:dist/test/unit/keyPair.js | AI (source-diff): Compiled TypeScript unit test; long lines from test data, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/StakingActivateBuilder.js | AI (source-diff): Compiled TypeScript unit test; standard tsc output pattern. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/StakingDeactivateBuilder.js | AI (source-diff): Compiled TypeScript unit test; standard tsc output pattern. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/StakingRedelegateBuilder.js | AI (source-diff): Compiled TypeScript unit test; standard tsc output pattern. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/StakingWithdrawRewardsBuilder.js | AI (source-diff): Compiled TypeScript unit test; standard tsc output pattern. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transaction.js | AI (source-diff): Compiled TypeScript unit test; standard tsc output pattern. | ai | |
| provenance | publisher-changed | AI (provenance): zahin-mohammad is an established BitGo org publisher with 321 approvals; transition appears legitimate. | ai | |
| phantom-deps | phantom-dep:@bitgo/sdk-lib-mpc | AI (phantom-deps): Same-org transitive usage; stable false positive for this BitGo monorepo package. | ai | |
| phantom-deps | phantom-dep:@cosmjs/encoding | AI (phantom-deps): Declared as runtime dep; phantom-dep heuristic false positive for this package. | ai |
Versions (showing 51 of 100)
| Version | Deps | Published |
|---|---|---|
| 13.13.14 | 8 / 4 | |
| 13.13.13 | 8 / 4 | |
| 13.13.11 | 8 / 4 | |
| 13.13.10 | 8 / 4 | |
| 13.13.9 | 8 / 4 | |
| 13.13.8 | 8 / 4 | |
| 13.13.7 | 8 / 4 | |
| 13.13.6 | 8 / 4 | |
| 13.13.5 | 8 / 4 | |
| 13.13.4 | 8 / 4 | |
| 13.13.3 | 8 / 4 | |
| 13.13.2 | 8 / 4 | |
| 13.13.1 | 8 / 4 | |
| 13.13.0 | 8 / 4 | |
| 13.12.11 | 8 / 4 | |
| 13.12.10 | 8 / 4 | |
| 13.12.9 | 8 / 4 | |
| 13.12.8 | 8 / 4 | |
| 13.12.7 | 8 / 4 | |
| 13.12.6 | 8 / 4 | |
| 13.11.0 | 8 / 4 | |
| 13.9.9 | 8 / 4 | |
| 13.9.5 | 8 / 4 | |
| 13.9.3 | 8 / 4 | |
| 13.9.2 | 8 / 4 | |
| 13.9.1 | 8 / 4 | |
| 13.9.0 | 8 / 4 | |
| 13.8.2 | 8 / 4 | |
| 13.8.1 | 8 / 4 | |
| 13.8.0 | 8 / 4 | |
| 13.7.1 | 8 / 4 | |
| 13.7.0 | 8 / 4 | |
| 13.6.3 | 8 / 4 | |
| 13.6.2 | 8 / 4 | |
| 13.6.1 | 8 / 4 | |
| 13.6.0 | 8 / 4 | |
| 13.5.11 | 8 / 4 | |
| 13.5.10 | 8 / 4 | |
| 13.5.9 | 8 / 4 | |
| 13.5.8 | 8 / 4 | |
| 13.5.7 | 8 / 4 | |
| 13.5.6 | 8 / 4 | |
| 13.5.5 | 8 / 4 | |
| 13.5.4 | 8 / 4 | |
| 13.5.3 | 8 / 4 | |
| 13.5.2 | 8 / 4 | |
| 13.5.1 | 8 / 4 | |
| 13.5.0 | 8 / 4 | |
| 13.4.14 | 8 / 4 | |
| 13.4.13 | 8 / 4 | |
| 13.4.12 | 8 / 4 |
v13.13.14
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.13.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.13.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.13.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.13.9
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v13.13.8
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.