@credo-ts/openid4vc
<p align="center"> <br /> <img alt="Credo Logo" src="https://github.com/openwallet-foundation/credo-ts/blob/c7886cb8377ceb8ee4efe8d264211e561a75072d/images/credo-logo.png" height="250px" /> </p> <h1 align="center"><b>Credo OpenID4VC Modu
9
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
openwalletfoundationtimoglastragenaris
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Package publishes via GitHub Actions CI/CD with SLSA attestation; publisher=GitHub Actions is expected for this org. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Maintainer addition consistent with org transition; SLSA provenance confirms CI/CD integrity. | ai | |
| provenance | no-provenance | AI (provenance): Established OWF package; provenance absence is consistent across all versions and not a risk indicator here. | ai | |
| dependencies | unvetted-dep:@openid4vc/openid4vci | AI (dependencies): Core upstream library for this OpenID4VC implementation; expected dependency across all versions. | ai | |
| dependencies | unvetted-dep:@openid4vc/openid4vp | AI (dependencies): Core upstream library for this OpenID4VC implementation; expected dependency across all versions. | ai | |
| dependencies | unvetted-dep:@openid4vc/utils | AI (dependencies): Core upstream library for this OpenID4VC implementation; expected dependency across all versions. | ai | |
| dependencies | unvetted-dep:@openid4vc/oauth2 | AI (dependencies): Core upstream library for this OpenID4VC implementation; expected dependency across all versions. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): zod is a runtime dep used transitively; phantom-dep heuristic fires but it's a legitimate dependency. | ai | |
| phantom-deps | phantom-dep:@types/express | AI (phantom-deps): Framework-scoped type package loaded by convention; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:rxjs | AI (phantom-deps): rxjs is a declared runtime dep; phantom-dep heuristic is a false positive here. | ai |