← Home

@dfinity/candid

11
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

dayyildiznpm-dfinity-orgbitdivineielashikeplervitaldfn_wndlngdfn-it-ownerg.perez

Keywords

internet computericdfinitycanisterwebauthnidentityprincipaldfxcandidmotokojavascripttypescriptblockchaincryptodistributedapi

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:nanoid AI (typosquat): @dfinity/candid is a legitimate, long-established DFINITY package with no relation to nanoid; the Levenshtein match is a false positive that will recur on every version. ai

Versions (showing 11 of 11)

Version Deps Published
3.4.3 0 / 0
3.4.2 0 / 0
3.2.6 0 / 0
3.2.3 0 / 0
3.2.2 0 / 0
3.2.1 0 / 0
3.2.0 0 / 0
3.1.0 0 / 0
3.0.2 0 / 0
3.0.1 0 / 0
3.0.0 0 / 0