@byoky/bridge
Local HTTP proxy + native messaging bridge that lets CLI tools (Claude Code, OpenClaw) route through the Byoky wallet
25
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
michaellod
Keywords
byokyclaudenative-messagingbridge
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): ws is a well-established WebSocket library; addition is consistent with bridge functionality. | ai | |
| provenance | no-provenance | AI (provenance): Package consistently lacks Sigstore provenance; not a security blocker for this package. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Flagged IP is 127.0.0.1 (localhost); this is a local bridge proxy and loopback use is expected. | ai | |
| phantom-deps | phantom-dep:@byoky/sdk | AI (phantom-deps): Same-org sibling dep; declared in package.json, likely used transitively or in dist output. | ai |
Versions (showing 25 of 25)
| Version | Deps | Published |
|---|---|---|
| 0.9.5 | 3 / 4 | |
| 0.9.2 | 2 / 4 | |
| 0.9.1 | 2 / 4 | |
| 0.9.0 | 2 / 4 | |
| 0.8.3 | 2 / 4 | |
| 0.7.10 | 1 / 3 | |
| 0.7.9 | 1 / 3 | |
| 0.7.8 | 1 / 3 | |
| 0.7.7 | 1 / 3 | |
| 0.7.6 | 1 / 3 | |
| 0.7.5 | 1 / 3 | |
| 0.7.4 | 1 / 3 | |
| 0.7.3 | 1 / 3 | |
| 0.7.2 | 1 / 3 | |
| 0.7.1 | 1 / 3 | |
| 0.7.0 | 1 / 3 | |
| 0.6.0 | 1 / 3 | |
| 0.5.4 | 1 / 3 | |
| 0.5.3 | 1 / 3 | |
| 0.5.1 | 1 / 3 | |
| 0.4.19 | 1 / 3 | |
| 0.4.12 | 0 / 3 | |
| 0.4.11 | 0 / 3 | |
| 0.3.0 | 0 / 3 | |
| 0.2.0 | 0 / 3 |