← Home

@chain-registry/utils

npm Repository Homepage

Chain Registry Utils

100
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

pyramationluca608zetazz

Keywords

chain-registryweb3cosmosinterchain

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@keplr-wallet/crypto AI (dependencies): @keplr-wallet/crypto is a well-known cryptographic library from the Keplr wallet team, a major Cosmos ecosystem project. Its use in chain-registry utils is expected and appropriate. ai
bogus-package bogus-package AI (bogus-package): Part of a large, established monorepo (cosmology-tech/chain-registry) by a trusted publisher; sparse README and missing keywords are cosmetic, not indicative of spam. ai
dependencies unvetted-dep:@chain-registry/types AI (dependencies): @chain-registry/types is a sibling package in the same hyperweb-io/chain-registry monorepo, published by the same trusted author (pyramation). Unvetted status is transient and expected for co-released packages. ai
dependencies unvetted-dep:chain-registry AI (dependencies): chain-registry is a sibling package in the same hyperweb-io/chain-registry monorepo, published by the same trusted author (pyramation). Unvetted status is transient and expected for co-released packages. ai
publish-pattern new-deps-added AI (publish-pattern): chain-registry is a sibling package in the same hyperweb-io/chain-registry monorepo, published by the same maintainer. Intra-monorepo dependency additions are expected and low-risk for this package. ai
phantom-deps phantom-dep:chain-registry AI (phantom-deps): chain-registry is a sibling monorepo package; indirect/config usage without direct import is a common pattern in this ecosystem. ai
license uncommon-license:SEE LICENSE IN LICENSE AI (license): Standard npm pattern referencing a LICENSE file; common in open-source projects and not a security concern. ai
provenance no-provenance AI (provenance): Package predates widespread provenance adoption; publisher has strong track record. Stable false positive for this package. ai

Versions (showing 100 of 841)

Version Deps Published
2.0.11 4 / 1
2.0.10 4 / 1
2.0.9 4 / 1
2.0.8 4 / 1
2.0.7 4 / 1
2.0.6 4 / 1
2.0.5 4 / 1
2.0.4 4 / 1
2.0.3 4 / 1
2.0.2 4 / 1
2.0.1 4 / 1
1.51.377 3 / 1
1.51.376 3 / 1
1.51.375 3 / 1
1.51.374 3 / 1
1.51.373 3 / 1
1.51.372 3 / 1
1.51.371 3 / 1
1.51.370 3 / 1
1.51.369 3 / 1
1.51.368 3 / 1
1.51.367 3 / 1
1.51.366 3 / 1
1.51.365 3 / 1
1.51.364 3 / 1
1.51.363 3 / 1
1.51.362 3 / 1
1.51.361 3 / 1
1.51.360 3 / 1
1.51.359 3 / 1
1.51.358 3 / 1
1.51.357 3 / 1
1.51.356 3 / 1
1.51.355 3 / 1
1.51.354 3 / 1
1.51.353 3 / 1
1.51.352 3 / 1
1.51.351 3 / 1
1.51.350 3 / 1
1.51.349 3 / 1
1.51.348 3 / 1
1.51.347 3 / 1
1.51.346 3 / 1
1.51.345 3 / 1
1.51.344 3 / 1
1.51.343 3 / 1
1.51.342 3 / 1
1.51.341 3 / 1
1.51.340 3 / 1
1.51.339 3 / 1
1.51.338 3 / 1
1.51.337 3 / 1
1.51.336 3 / 1
1.51.335 3 / 1
1.51.334 3 / 1
1.51.333 3 / 1
1.51.332 3 / 1
1.51.331 3 / 1
1.51.330 3 / 1
1.51.329 3 / 1
1.51.328 3 / 1
1.51.327 3 / 1
1.51.326 3 / 1
1.51.325 3 / 1
1.51.324 3 / 1
1.51.323 3 / 1
1.51.322 3 / 1
1.51.321 3 / 1
1.51.320 3 / 1
1.51.319 3 / 1
1.51.317 3 / 1
1.51.316 3 / 1
1.51.315 3 / 1
1.51.314 3 / 1
1.51.313 3 / 1
1.51.312 3 / 1
1.51.311 3 / 1
1.51.310 3 / 1
1.51.309 3 / 1
1.51.308 3 / 1
1.51.307 3 / 1
1.51.306 3 / 1
1.51.305 3 / 1
1.51.304 3 / 1
1.51.303 3 / 1
1.51.302 3 / 1
1.51.301 3 / 1
1.51.300 3 / 1
1.51.299 3 / 1
1.51.298 3 / 1
1.51.297 3 / 1
1.51.296 3 / 1
1.51.295 3 / 1
1.51.294 3 / 1
1.51.293 3 / 1
1.51.292 3 / 1
1.51.291 3 / 1
1.51.290 3 / 1
1.51.289 3 / 1
1.51.288 3 / 1
Showing 100 of 841 Next page →

v1.51.377

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.376

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.375

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.374

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.373

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.372

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.371

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.370

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.369

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.368

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.367

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.366

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.365

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.364

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.363

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.362

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.361

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.360

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.359

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.358

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.357

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.356

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.355

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.354

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.353

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.352

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.351

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.350

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.349

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.348

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.51.347

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.