@bitgo/sdk-coin-canton
BitGo SDK coin library for Canton
11
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
louib-bitgobitgobot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/test/unit/builder/transfer/transferBuilder.js | AI (source-diff): Compiled TS test; long lines from test resource data. | ai | |
| source-diff | obfuscated-file:dist/src/lib/transferRejectionBuilder.js | AI (source-diff): Readable compiled TS; long lines from inline source maps. | ai | |
| source-diff | obfuscated-file:dist/test/unit/builder/transferReject/transferRejectBuilder.js | AI (source-diff): Readable unit test compiled from TS; long lines from test data/source maps. | ai | |
| source-diff | obfuscated-file:dist/test/unit/builder/transferAcknowledge/transferAcknowledgeBuilder.js | AI (source-diff): Readable unit test compiled from TS; long lines from test data/source maps. | ai | |
| source-diff | obfuscated-file:dist/test/integration/canton.integration.js | AI (source-diff): Readable integration test compiled from TS; long lines from test data/source maps. | ai | |
| source-diff | obfuscated-file:dist/src/lib/transferAcknowledgeBuilder.js | AI (source-diff): Readable compiled TS; long lines from inline source maps. | ai | |
| source-diff | obfuscated-file:dist/src/lib/walletInitBuilder.js | AI (source-diff): Readable compiled TypeScript; false positive on long-line heuristic. | ai | |
| source-diff | obfuscated-file:dist/test/unit/builder/walletInit/walletInitBuilder.js | AI (source-diff): Readable compiled TypeScript test file; false positive on long-line heuristic. | ai | |
| source-diff | obfuscated-file:dist/src/lib/walletInitialization/walletInitTransaction.js | AI (source-diff): Readable compiled TypeScript; false positive on long-line heuristic. | ai | |
| source-diff | obfuscated-file:dist/test/unit/utils.js | AI (source-diff): Readable compiled TypeScript test file; false positive on long-line heuristic. | ai | |
| source-diff | obfuscated-file:dist/src/lib/oneStepPreApprovalBuilder.js | AI (source-diff): Readable compiled TypeScript; long lines likely from inline source maps or test fixtures. | ai | |
| source-diff | obfuscated-file:dist/test/unit/builder/oneStepEnablement/oneStepEnablementBuilder.js | AI (source-diff): Readable compiled TypeScript test file; false positive on long-line heuristic. | ai | |
| source-diff | obfuscated-file:dist/src/lib/transaction/transaction.js | AI (source-diff): Readable compiled TypeScript; false positive on long-line heuristic. | ai | |
| source-diff | obfuscated-file:dist/src/lib/transferAcceptanceBuilder.js | AI (source-diff): Readable compiled TypeScript; false positive on long-line heuristic. | ai | |
| source-diff | obfuscated-file:dist/test/unit/builder/transferAccept/transferAcceptBuilder.js | AI (source-diff): Readable compiled TypeScript test file; false positive on long-line heuristic. | ai | |
| source-diff | obfuscated-file:dist/test/resources.d.ts | AI (source-diff): Single long string constant is a protobuf-encoded test fixture exported as a TypeScript declaration; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/src/lib/walletInitialization/walletInitializationTransaction.js | AI (source-diff): Long line is an inline base64 source map from tsc; code above it is readable and benign. | ai | |
| source-diff | obfuscated-file:dist/src/lib/resourcesInterface.js | AI (source-diff): Long line is an inline base64 source map generated by tsc; standard TypeScript compilation artifact. | ai | |
| source-diff | obfuscated-file:dist/test/resources.js | AI (source-diff): Base64 content is protobuf-serialized test fixture data, not obfuscated malware; consistent with Canton/Daml ledger test resources. | ai | |
| dependencies | unvetted-dep:@bitgo/sdk-core | AI (dependencies): First-party BitGo monorepo package; stable false positive for this package family. | ai |