@hyperlane-xyz/sdk
14
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
nambrotyorhodestkporterpaulbalaji
Keywords
HyperlaneSDKTypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | encoded-string-file:dist/core/adapters/CosmWasmCoreAdapter.test.js | AI (source-diff): Long string is a JSON-encoded Cosmos TX receipt used as test fixture data; stable false positive for this package. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): Package published via CI/CD with SLSA provenance; maintainer addition is a routine org change for this monorepo. | ai | |
| dependencies | unvetted-dep:starknet | AI (dependencies): Legitimate StarkNet integration dependency for a multi-chain SDK; stable pattern across versions. | ai | |
| dependencies | unvetted-dep:@hyperlane-xyz/core | AI (dependencies): First-party monorepo sibling package; expected dependency for this SDK. | ai | |
| phantom-deps | phantom-dep:@cosmjs/crypto | AI (phantom-deps): CosmJS deps are declared and used transitively; phantom-dep heuristic false positive for this monorepo package. | ai | |
| phantom-deps | phantom-dep:@cosmjs/tendermint-rpc | AI (phantom-deps): Same as above — CosmJS tendermint-rpc is a legitimate declared dep used via config/type references. | ai | |
| provenance | slsa-provenance | AI (provenance): Hyperlane monorepo consistently publishes with SLSA provenance; stable signal across versions. | ai |