@bitgo/sdk-coin-xlm
BitGo SDK coin library for Xlm
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
louib-bitgobitgobot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-removed | AI (maintainer-change): Mass removal of individual BitGo maintainers consistent with org-wide bot-publisher migration. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): bitgobot addition is part of BitGo org-wide automation rollout, not a takeover. | ai | |
| provenance | publisher-changed | AI (provenance): BitGo org-wide migration to bitgobot publisher; consistent across many approved packages. | ai | |
| phantom-deps | phantom-dep:stellar-sdk | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic fires on indirect usage patterns. | ai | |
| phantom-deps | phantom-dep:bignumber.js | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic fires on indirect usage patterns. | ai | |
| phantom-deps | phantom-dep:@bitgo/sdk-core | AI (phantom-deps): Same-org declared dep; stable false positive for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@bitgo/statics | AI (phantom-deps): Same-org declared dep; stable false positive for this monorepo package. | ai | |
| phantom-deps | phantom-dep:lodash | AI (phantom-deps): Declared runtime dep in BitGo monorepo; phantom-dep heuristic fires on indirect usage patterns. | ai | |
| phantom-deps | phantom-dep:superagent | AI (phantom-deps): Declared runtime dep; phantom-dep heuristic fires on indirect usage patterns. | ai | |
| provenance | no-provenance | AI (provenance): BitGo SDK packages consistently lack Sigstore provenance; stable false positive for this package family. | ai | |
| dependencies | unvetted-dep:@bitgo/sdk-core | AI (dependencies): First-party BitGo monorepo package; stable false positive for this package family. | ai |
Versions (showing 51 of 133)
| Version | Deps | Published |
|---|---|---|
| 3.10.3 | 6 / 2 | |
| 3.10.2 | 6 / 2 | |
| 3.10.1 | 6 / 2 | |
| 3.10.0 | 6 / 2 | |
| 3.9.9 | 6 / 2 | |
| 3.9.8 | 6 / 2 | |
| 3.9.7 | 6 / 2 | |
| 3.9.6 | 6 / 2 | |
| 3.9.5 | 6 / 2 | |
| 3.9.4 | 6 / 2 | |
| 3.9.3 | 6 / 2 | |
| 3.9.2 | 6 / 2 | |
| 3.9.1 | 6 / 2 | |
| 3.9.0 | 6 / 2 | |
| 3.8.9 | 6 / 2 | |
| 3.8.8 | 6 / 2 | |
| 3.8.7 | 6 / 2 | |
| 3.8.6 | 6 / 2 | |
| 3.8.5 | 6 / 2 | |
| 3.8.4 | 6 / 2 | |
| 3.8.3 | 6 / 2 | |
| 3.8.2 | 6 / 2 | |
| 3.8.1 | 6 / 2 | |
| 3.8.0 | 6 / 2 | |
| 3.7.22 | 6 / 2 | |
| 3.7.20 | 6 / 2 | |
| 3.7.19 | 6 / 2 | |
| 3.7.18 | 6 / 2 | |
| 3.7.17 | 6 / 2 | |
| 3.7.16 | 6 / 2 | |
| 3.7.15 | 6 / 2 | |
| 3.7.14 | 6 / 2 | |
| 3.7.13 | 6 / 2 | |
| 3.7.12 | 6 / 2 | |
| 3.7.11 | 6 / 2 | |
| 3.7.10 | 6 / 2 | |
| 3.7.0 | 6 / 2 | |
| 3.6.1 | 6 / 2 | |
| 3.6.0 | 6 / 2 | |
| 3.5.4 | 6 / 2 | |
| 3.5.3 | 6 / 2 | |
| 3.5.2 | 6 / 2 | |
| 3.5.1 | 6 / 2 | |
| 3.5.0 | 6 / 2 | |
| 3.4.15 | 6 / 2 | |
| 3.4.14 | 6 / 2 | |
| 3.4.13 | 6 / 2 | |
| 3.4.12 | 6 / 2 | |
| 3.4.11 | 6 / 2 | |
| 3.4.10 | 6 / 2 | |
| 3.4.9 | 6 / 2 |