@bitgo/sdk-coin-ethlike
BitGo SDK coin library for EthLike coins
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
louib-bitgobitgobot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher change to bitgobot is a known BitGo CI automation transition, not a compromise. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): bitgobot is BitGo's established CI publisher with extensive approved track record. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removal of individual maintainers in favor of bot account is consistent with BitGo monorepo CI consolidation. | ai | |
| source-diff | obfuscated-file:dist/test/fixtures/ethlikeCoin.js | AI (source-diff): Standard TypeScript compiled test fixture; long lines from inline data objects, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/unit/ethlikeCoin.js | AI (source-diff): Standard tsc-compiled test output with normal CommonJS boilerplate; not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/test/resources.js | AI (source-diff): Compiled test resource file; long lines from hex-encoded transaction data, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/unit/walletInitialization.js | AI (source-diff): Standard tsc-compiled test output; CommonJS boilerplate pattern is normal for TypeScript builds. | ai | |
| maintainer-change | maintainer-takeover | AI (maintainer-change): BitGo consolidated to bitgobot CI account across their monorepo; 118 approved packages confirm legitimate automation. | ai | |
| phantom-deps | phantom-dep:ethereumjs-util | AI (phantom-deps): Declared in package.json as a direct dep; phantom-dep heuristic fires on config-file references, stable false positive. | ai | |
| phantom-deps | phantom-dep:@bitgo/secp256k1 | AI (phantom-deps): Same-org dependency; phantom-dep heuristic is a stable false positive for this package. | ai |
Versions (showing 51 of 54)
| Version | Deps | Published |
|---|---|---|
| 2.7.9 | 6 / 2 | |
| 2.7.8 | 6 / 2 | |
| 2.7.7 | 6 / 2 | |
| 2.7.6 | 6 / 2 | |
| 2.7.5 | 6 / 2 | |
| 2.7.4 | 6 / 2 | |
| 2.7.3 | 6 / 2 | |
| 2.7.2 | 6 / 2 | |
| 2.7.1 | 6 / 2 | |
| 2.7.0 | 6 / 2 | |
| 2.6.9 | 6 / 2 | |
| 2.6.8 | 6 / 2 | |
| 2.6.7 | 6 / 2 | |
| 2.6.6 | 6 / 2 | |
| 2.6.5 | 6 / 2 | |
| 2.6.4 | 6 / 2 | |
| 2.6.3 | 6 / 2 | |
| 2.6.2 | 6 / 2 | |
| 2.6.1 | 6 / 2 | |
| 2.6.0 | 6 / 2 | |
| 2.5.5 | 6 / 2 | |
| 2.5.3 | 6 / 2 | |
| 2.5.2 | 6 / 2 | |
| 2.5.1 | 6 / 2 | |
| 2.5.0 | 6 / 2 | |
| 2.4.9 | 6 / 2 | |
| 2.4.8 | 6 / 2 | |
| 2.4.7 | 6 / 2 | |
| 2.4.6 | 6 / 2 | |
| 2.4.5 | 6 / 2 | |
| 2.4.4 | 6 / 2 | |
| 2.4.3 | 6 / 2 | |
| 2.4.2 | 6 / 2 | |
| 2.4.1 | 6 / 2 | |
| 2.4.0 | 6 / 2 | |
| 2.3.0 | 6 / 2 | |
| 2.2.7 | 6 / 2 | |
| 2.2.6 | 6 / 2 | |
| 2.2.5 | 6 / 2 | |
| 2.2.4 | 6 / 2 | |
| 2.2.3 | 6 / 2 | |
| 2.2.2 | 6 / 2 | |
| 2.2.1 | 6 / 2 | |
| 2.2.0 | 6 / 2 | |
| 2.1.4 | 6 / 2 | |
| 2.1.3 | 6 / 2 | |
| 2.1.2 | 6 / 2 | |
| 2.1.1 | 6 / 2 | |
| 2.1.0 | 6 / 2 | |
| 2.0.4 | 6 / 2 | |
| 2.0.3 | 6 / 2 |