@hiero-ledger/solo
An opinionated CLI tool to deploy and manage private Hedera Networks.
6
Versions
Apache2.0
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
lfdt-npmrbarkernathan-swirldslabsandrewb1269hg
Keywords
solosolo-chartssolo-network-manager
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | large-new-source-files | AI (source-diff): Active project with regular releases; new source files reflect feature growth, not injected code. | ai | |
| dependencies | unvetted-dep:elliptic | AI (dependencies): elliptic is a well-known crypto library; no advisory flagged for 6.6.1 in this context. | ai | |
| dependencies | unvetted-dep:stream-buffers | AI (dependencies): stream-buffers is a stable, widely-used utility library with no known malicious history. | ai | |
| phantom-deps | phantom-dep:esm | AI (phantom-deps): Phantom dep heuristic false positive; stable for this package. | ai | |
| phantom-deps | phantom-dep:figlet | AI (phantom-deps): Phantom dep heuristic false positive; stable for this package. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Pattern is augmenting PATH for subprocess execution, not leaking secrets; stable pattern for this package. | ai | |
| phantom-deps | phantom-dep:shell-quote | AI (phantom-deps): Phantom dep heuristic false positive; stable for this package. | ai | |
| phantom-deps | phantom-dep:stream-buffers | AI (phantom-deps): Phantom dep heuristic false positive; stable for this package. | ai | |
| phantom-deps | phantom-dep:elliptic | AI (phantom-deps): Phantom dep heuristic false positive; stable for this package. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Decoding received message content for display/logging; no malicious payload hiding. | ai | |
| phantom-deps | phantom-dep:ip | AI (phantom-deps): Phantom dep heuristic false positive; stable for this package. | ai |