← Home

@bitgo/sdk-coin-ethlike

BitGo SDK coin library for EthLike coins

51
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

louib-bitgobitgobot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher change to bitgobot is a known BitGo CI automation transition, not a compromise. ai
maintainer-change maintainer-added AI (maintainer-change): bitgobot is BitGo's established CI publisher with extensive approved track record. ai
maintainer-change maintainer-removed AI (maintainer-change): Removal of individual maintainers in favor of bot account is consistent with BitGo monorepo CI consolidation. ai
source-diff obfuscated-file:dist/test/fixtures/ethlikeCoin.js AI (source-diff): Standard TypeScript compiled test fixture; long lines from inline data objects, not obfuscation. ai
source-diff obfuscated-file:dist/test/unit/ethlikeCoin.js AI (source-diff): Standard tsc-compiled test output with normal CommonJS boilerplate; not obfuscated. ai
source-diff obfuscated-file:dist/test/resources.js AI (source-diff): Compiled test resource file; long lines from hex-encoded transaction data, not malicious obfuscation. ai
source-diff obfuscated-file:dist/test/unit/walletInitialization.js AI (source-diff): Standard tsc-compiled test output; CommonJS boilerplate pattern is normal for TypeScript builds. ai
maintainer-change maintainer-takeover AI (maintainer-change): BitGo consolidated to bitgobot CI account across their monorepo; 118 approved packages confirm legitimate automation. ai
phantom-deps phantom-dep:ethereumjs-util AI (phantom-deps): Declared in package.json as a direct dep; phantom-dep heuristic fires on config-file references, stable false positive. ai
phantom-deps phantom-dep:@bitgo/secp256k1 AI (phantom-deps): Same-org dependency; phantom-dep heuristic is a stable false positive for this package. ai

Versions (showing 51 of 54)

View all versions
Version Deps Published
2.7.9 6 / 2
2.7.8 6 / 2
2.7.7 6 / 2
2.7.6 6 / 2
2.7.5 6 / 2
2.7.4 6 / 2
2.7.3 6 / 2
2.7.2 6 / 2
2.7.1 6 / 2
2.7.0 6 / 2
2.6.9 6 / 2
2.6.8 6 / 2
2.6.7 6 / 2
2.6.6 6 / 2
2.6.5 6 / 2
2.6.4 6 / 2
2.6.3 6 / 2
2.6.2 6 / 2
2.6.1 6 / 2
2.6.0 6 / 2
2.5.5 6 / 2
2.5.3 6 / 2
2.5.2 6 / 2
2.5.1 6 / 2
2.5.0 6 / 2
2.4.9 6 / 2
2.4.8 6 / 2
2.4.7 6 / 2
2.4.6 6 / 2
2.4.5 6 / 2
2.4.4 6 / 2
2.4.3 6 / 2
2.4.2 6 / 2
2.4.1 6 / 2
2.4.0 6 / 2
2.3.0 6 / 2
2.2.7 6 / 2
2.2.6 6 / 2
2.2.5 6 / 2
2.2.4 6 / 2
2.2.3 6 / 2
2.2.2 6 / 2
2.2.1 6 / 2
2.2.0 6 / 2
2.1.4 6 / 2
2.1.3 6 / 2
2.1.2 6 / 2
2.1.1 6 / 2
2.1.0 6 / 2
2.0.4 6 / 2
2.0.3 6 / 2