@bitgo/sdk-coin-trx
BitGo SDK coin library for Tron
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
louib-bitgobitgobot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | encoded-string-file:dist/test/resources.js | AI (source-diff): Long strings are Tron raw_data_hex test fixtures; expected in a TRX SDK. | ai | |
| source-diff | encoded-string-file:dist/test/unit/transactionBuilder/freezeBalanceTxBuilder.js | AI (source-diff): Long strings are hex-encoded Tron transaction protobuf test vectors, not payloads. | ai | |
| source-diff | encoded-string-file:dist/test/unit/verifyTransaction.js | AI (source-diff): Long string is a TRC20 TriggerSmartContract protobuf hex used in a defense-in-depth test. | ai | |
| source-diff | obfuscated-file:dist/src/lib/accountCreateTxBuilder.js | AI (source-diff): TypeScript compiled output; readable class structure with no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/unit/transactionBuilder/accountCreateTxBuilder.js | AI (source-diff): Compiled test file; standard CJS output with no obfuscation. | ai | |
| source-diff | obfuscated-file:dist/test/unit/trxToken.js | AI (source-diff): Compiled test file; long lines are hex-encoded Tron protobuf test fixtures. | ai | |
| provenance | publisher-changed | AI (provenance): BitGo migrated publishing to GitHub Actions CI with SLSA attestation; stable pattern for this org. | ai | |
| source-diff | encoded-string-file:dist/test/unit/transactionBuilder/tokenTransferBuilder.js | AI (source-diff): Long hex string is a TRX transaction fixture in a test file, not an obfuscated payload. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): louib-bitgo is a BitGo org maintainer; consistent with normal team management. | ai | |
| phantom-deps | phantom-dep:@stablelib/hex | AI (phantom-deps): Declared runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@bitgo/secp256k1 | AI (phantom-deps): Same-org declared dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:ethers | AI (phantom-deps): Declared runtime dep in package.json for this TRX SDK; phantom-dep heuristic false positive. | ai | |
| phantom-deps | phantom-dep:lodash | AI (phantom-deps): Declared runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:tronweb | AI (phantom-deps): Declared runtime dep; core dependency for Tron coin SDK. | ai | |
| phantom-deps | phantom-dep:secp256k1 | AI (phantom-deps): Declared runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:superagent | AI (phantom-deps): Declared runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:bignumber.js | AI (phantom-deps): Declared runtime dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@bitgo/statics | AI (phantom-deps): Same-org declared dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@bitgo/sdk-core | AI (phantom-deps): Same-org declared dep; stable false positive. | ai | |
| provenance | no-provenance | AI (provenance): BitGo SDK packages consistently lack Sigstore provenance; stable false positive for this package family. | ai | |
| dependencies | unvetted-dep:@bitgo/sdk-core | AI (dependencies): Internal BitGo monorepo dependency; stable pattern across all @bitgo/sdk-coin-* packages. | ai | |
| dependencies | unvetted-dep:@bitgo/sdk-lib-mpc | AI (dependencies): Internal BitGo monorepo dependency; stable pattern across all @bitgo/sdk-coin-* packages. | ai |
Versions (showing 51 of 76)
| Version | Deps | Published |
|---|---|---|
| 3.16.3 | 13 / 3 | |
| 3.16.2 | 13 / 3 | |
| 3.16.1 | 13 / 3 | |
| 3.16.0 | 13 / 3 | |
| 3.15.2 | 13 / 3 | |
| 3.15.1 | 13 / 3 | |
| 3.15.0 | 13 / 3 | |
| 3.14.0 | 13 / 3 | |
| 3.13.7 | 13 / 3 | |
| 3.13.6 | 13 / 3 | |
| 3.13.5 | 13 / 3 | |
| 3.13.4 | 13 / 3 | |
| 3.13.3 | 13 / 3 | |
| 3.13.2 | 13 / 3 | |
| 3.13.1 | 13 / 3 | |
| 3.13.0 | 13 / 3 | |
| 3.12.0 | 13 / 3 | |
| 3.11.1 | 13 / 3 | |
| 3.11.0 | 13 / 3 | |
| 3.10.1 | 12 / 3 | |
| 3.10.0 | 12 / 3 | |
| 3.9.4 | 12 / 3 | |
| 3.9.3 | 12 / 3 | |
| 3.9.2 | 12 / 3 | |
| 3.9.1 | 12 / 3 | |
| 3.9.0 | 12 / 3 | |
| 3.8.4 | 12 / 3 | |
| 3.8.2 | 12 / 3 | |
| 3.8.1 | 12 / 3 | |
| 3.8.0 | 12 / 3 | |
| 3.7.16 | 12 / 3 | |
| 3.7.15 | 12 / 3 | |
| 3.7.14 | 12 / 3 | |
| 3.7.13 | 12 / 3 | |
| 3.7.12 | 12 / 3 | |
| 3.7.11 | 12 / 3 | |
| 3.7.10 | 12 / 3 | |
| 3.7.9 | 12 / 3 | |
| 3.7.8 | 12 / 3 | |
| 3.7.7 | 12 / 3 | |
| 3.7.6 | 12 / 3 | |
| 3.7.5 | 12 / 3 | |
| 3.7.4 | 12 / 3 | |
| 3.7.3 | 12 / 3 | |
| 3.7.2 | 12 / 3 | |
| 3.7.1 | 12 / 3 | |
| 3.6.2 | 12 / 3 | |
| 3.6.1 | 12 / 3 | |
| 3.6.0 | 12 / 3 | |
| 3.5.4 | 12 / 3 | |
| 3.5.3 | 12 / 3 |