@bitgo/sdk-coin-bsc
BitGo SDK coin library for Binance Smart Chain
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-removed | AI (maintainer-change): BitGo consolidating to bot publisher; consistent with org-wide publishing pattern. | ai | |
| source-diff | obfuscated-file:dist/test/unit/messages/integration.js | AI (source-diff): Standard tsc output with inline base64 source maps; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/test/unit/messages/messageBuilderFactory.js | AI (source-diff): Standard tsc output with inline base64 source maps; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/test/unit/utils.js | AI (source-diff): Standard tsc output with inline base64 source maps; not obfuscated code. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): bitgobot is BitGo's established publishing bot with 117 approved packages. | ai | |
| source-diff | obfuscated-file:dist/test/unit/bsc.js | AI (source-diff): Standard tsc output with inline base64 source maps; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/test/unit/bscToken.js | AI (source-diff): Standard tsc output with inline base64 source maps; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/test/fixtures/ecdsa.js | AI (source-diff): Cryptographic test fixture data in compiled JS; long lines are hex key material, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/unit/messages/eip191MessageBuilder.js | AI (source-diff): Standard tsc output with inline base64 source maps; not obfuscated code. | ai | |
| provenance | publisher-changed | AI (provenance): Both publishers are BitGo org accounts; internal rotation pattern, not a takeover signal. | ai | |
| dependencies | unvetted-dep:@bitgo/abstract-eth | AI (dependencies): Internal BitGo monorepo dependency; expected for this package. | ai | |
| dependencies | unvetted-dep:@bitgo/sdk-coin-eth | AI (dependencies): Internal BitGo monorepo dependency; expected for this package. | ai | |
| dependencies | unvetted-dep:@bitgo/sdk-core | AI (dependencies): Internal BitGo monorepo dependency; expected for this package. | ai |
Versions (showing 51 of 153)
| Version | Deps | Published |
|---|---|---|
| 22.12.16 | 5 / 2 | |
| 22.12.15 | 5 / 2 | |
| 22.12.13 | 5 / 2 | |
| 22.12.12 | 5 / 2 | |
| 22.12.11 | 5 / 2 | |
| 22.12.10 | 5 / 2 | |
| 22.12.9 | 5 / 2 | |
| 22.12.8 | 5 / 2 | |
| 22.12.7 | 5 / 2 | |
| 22.12.6 | 5 / 2 | |
| 22.12.5 | 5 / 2 | |
| 22.12.4 | 5 / 2 | |
| 22.12.3 | 5 / 2 | |
| 22.12.2 | 5 / 2 | |
| 22.12.1 | 5 / 2 | |
| 22.12.0 | 5 / 2 | |
| 22.11.9 | 5 / 2 | |
| 22.11.8 | 5 / 2 | |
| 22.11.7 | 5 / 2 | |
| 22.11.6 | 5 / 2 | |
| 22.11.5 | 5 / 2 | |
| 22.11.4 | 5 / 2 | |
| 22.11.3 | 5 / 2 | |
| 22.11.2 | 5 / 2 | |
| 22.11.1 | 5 / 2 | |
| 22.11.0 | 5 / 2 | |
| 22.10.9 | 5 / 2 | |
| 22.10.8 | 5 / 2 | |
| 22.10.7 | 5 / 2 | |
| 22.10.6 | 5 / 2 | |
| 22.10.5 | 5 / 2 | |
| 22.10.4 | 5 / 2 | |
| 22.10.3 | 5 / 2 | |
| 22.10.2 | 5 / 2 | |
| 22.10.1 | 5 / 2 | |
| 22.10.0 | 5 / 2 | |
| 22.9.12 | 5 / 2 | |
| 22.9.10 | 5 / 2 | |
| 22.9.9 | 5 / 2 | |
| 22.9.8 | 5 / 2 | |
| 22.9.7 | 5 / 2 | |
| 22.9.6 | 5 / 2 | |
| 22.9.5 | 5 / 2 | |
| 22.9.4 | 5 / 2 | |
| 22.9.3 | 5 / 2 | |
| 22.9.2 | 5 / 2 | |
| 22.9.1 | 5 / 2 | |
| 22.9.0 | 5 / 2 | |
| 22.8.11 | 5 / 2 | |
| 22.8.10 | 5 / 2 | |
| 22.8.9 | 5 / 2 |
v22.12.16
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v22.12.15
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v22.12.13
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v22.12.12
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v22.12.11
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v22.12.10
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.