@bitgo/sdk-coin-rune MIT 20 versions

@bitgo/sdk-coin-rune

npm Repository Homepage

BitGo SDK coin library for Thorchain

20

Versions

MIT

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

louib-bitgobitgobot

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): BitGo migrated publishing to GitHub Actions CI with SLSA attestation; stable pattern for this org.	ai	2026/05/17
maintainer-change	maintainer-added	AI (maintainer-change): louib-bitgo is a BitGo-namespaced account; consistent with internal team change, not external takeover.	ai	2026/05/17
phantom-deps	phantom-dep:@cosmjs/encoding	AI (phantom-deps): @cosmjs/encoding is a declared runtime dep used in config/type references; stable false positive for this package.	ai	2026/05/17

Versions (showing 20 of 120)

Version	Deps	Published
1.1.20	10 / 2	2025-01-28
1.1.19	10 / 2	2025-01-23
1.1.18	10 / 2	2025-01-23
1.1.17	10 / 2	2025-01-20
1.1.16	10 / 2	2025-01-15
1.1.15	10 / 2	2025-01-09
1.1.14	10 / 2	2025-01-03
1.1.13	10 / 2	2024-12-24
1.1.12	10 / 2	2024-12-19
1.1.11	10 / 2	2024-12-17
1.1.9	10 / 2	2024-12-12
1.1.8	10 / 2	2024-12-11
1.1.7	10 / 2	2024-12-03
1.1.6	10 / 2	2024-11-26
1.1.5	10 / 2	2024-11-21
1.1.4	10 / 2	2024-11-19
1.1.3	10 / 2	2024-11-14
1.1.2	10 / 2	2024-11-08
1.1.1	10 / 2	2024-11-07
1.1.0	10 / 2	2024-11-01

v1.1.20

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.19

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.18

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.17

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.16

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.15

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.14

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.13

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.1.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.