← Home

@bitgo/sdk-coin-initia

npm Repository Homepage

BitGo SDK coin library for Initia

85
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

louib-bitgobitgobot

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-takeover AI (maintainer-change): BitGo monorepo-wide migration to bitgobot publisher; 989 approved packages confirm legitimacy. ai
source-diff obfuscated-file:dist/test/unit/keyPair.js AI (source-diff): Compiled TypeScript unit test; long lines are standard TS compilation output. ai
source-diff obfuscated-file:dist/test/resources/initia.js AI (source-diff): Compiled TypeScript test fixture with long base64 transaction data; not obfuscated runtime code. ai
source-diff obfuscated-file:dist/test/unit/initia.js AI (source-diff): Compiled TypeScript unit test; long lines are standard TS compilation output. ai
source-diff obfuscated-file:dist/test/unit/transaction.js AI (source-diff): Compiled TypeScript unit test; long lines are standard TS compilation output. ai
source-diff obfuscated-file:dist/test/unit/transactionBuilder/transactionBuilder.js AI (source-diff): Compiled TypeScript unit test; long lines are standard TS compilation output. ai
source-diff obfuscated-file:dist/test/unit/transactionBuilder/transferBuilder.js AI (source-diff): Compiled TypeScript unit test; long lines are standard TS compilation output. ai
source-diff obfuscated-file:dist/test/unit/utils.js AI (source-diff): Compiled TypeScript unit test; long lines are standard TS compilation output. ai
maintainer-change maintainer-added AI (maintainer-change): bitgobot is the canonical BitGo bot account; stable org-level maintainer consolidation. ai
maintainer-change maintainer-removed AI (maintainer-change): Bulk removal consistent with BitGo consolidating to bot publisher; no malicious indicators. ai
provenance publisher-changed AI (provenance): bitgobot is BitGo's automation publisher with 972 approved packages; transition from individual maintainer is expected org practice. ai
phantom-deps phantom-dep:@bitgo/sdk-core AI (phantom-deps): Same-org monorepo dep; stable FP for this package. ai
phantom-deps phantom-dep:@cosmjs/stargate AI (phantom-deps): Monorepo SDK package; deps used transitively or in config files, stable FP. ai
phantom-deps phantom-dep:@bitgo/abstract-cosmos AI (phantom-deps): Same-org monorepo dep; stable FP for this package. ai
phantom-deps phantom-dep:@bitgo/statics AI (phantom-deps): Same-org monorepo dep; stable FP for this package. ai
phantom-deps phantom-dep:@cosmjs/amino AI (phantom-deps): Monorepo SDK package; deps used transitively or in config files, stable FP. ai
phantom-deps phantom-dep:bignumber.js AI (phantom-deps): Monorepo SDK package; deps used transitively or in config files, stable FP. ai
phantom-deps phantom-dep:@cosmjs/encoding AI (phantom-deps): @cosmjs/encoding is a declared runtime dep used transitively; phantom-dep is a stable false positive for this package. ai

Versions (showing 85 of 85)

Version Deps Published
2.6.26 7 / 2
2.6.25 7 / 2
2.6.23 7 / 2
2.6.22 7 / 2
2.6.21 7 / 2
2.6.20 7 / 2
2.6.19 7 / 2
2.6.18 7 / 2
2.6.17 7 / 2
2.6.16 7 / 2
2.6.15 7 / 2
2.6.14 7 / 2
2.6.13 7 / 2
2.6.12 7 / 2
2.6.11 7 / 2
2.6.10 7 / 2
2.6.9 7 / 2
2.6.8 7 / 2
2.6.7 7 / 2
2.6.6 7 / 2
2.6.5 7 / 2
2.6.4 7 / 2
2.6.3 7 / 2
2.6.2 7 / 2
2.6.1 7 / 2
2.6.0 7 / 2
2.5.9 7 / 2
2.5.8 7 / 2
2.5.7 7 / 2
2.5.6 7 / 2
2.5.5 7 / 2
2.5.4 7 / 2
2.5.3 7 / 2
2.5.2 7 / 2
2.5.1 7 / 2
2.5.0 7 / 2
2.4.24 7 / 2
2.4.22 7 / 2
2.4.21 7 / 2
2.4.20 7 / 2
2.4.19 7 / 2
2.4.18 7 / 2
2.4.17 7 / 2
2.4.16 7 / 2
2.4.15 7 / 2
2.4.14 7 / 2
2.4.13 7 / 2
2.4.12 7 / 2
2.4.11 7 / 2
2.4.10 7 / 2
2.4.9 7 / 2
2.4.8 7 / 2
2.4.7 7 / 2
2.4.6 7 / 2
2.4.5 7 / 2
2.4.4 7 / 2
2.4.3 7 / 2
2.4.2 7 / 2
2.4.1 7 / 2
2.4.0 7 / 2
2.3.4 7 / 2
2.3.3 7 / 2
2.3.2 7 / 2
2.3.1 7 / 2
2.3.0 7 / 2
2.2.3 7 / 2
2.2.2 7 / 2
2.2.1 7 / 2
2.2.0 7 / 2
2.1.11 7 / 2
2.1.10 7 / 2
2.1.9 7 / 2
2.1.8 7 / 2
2.1.7 7 / 2
2.1.6 7 / 2
2.1.5 7 / 2
2.1.4 7 / 2
2.1.3 7 / 2
2.1.2 7 / 2
2.1.1 7 / 2
2.1.0 7 / 2
2.0.3 7 / 2
2.0.2 7 / 2
2.0.1 7 / 2
2.0.0 7 / 2

v2.6.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.6.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.6.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.6.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.6.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.6.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.