@injectivelabs/sdk-ts
SDK in TypeScript for building Injective applications in a browser, node, and react native environment.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/cjs/index-BU32_7AB.d.cts | AI (source-diff): Bundler-generated chunk with long import lines; not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/index-53Nc40Ah.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-Bl5qIcb9.js | AI (source-diff): Rollup/tsdown bundle chunk; long lines are import statements from tree-shaking, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-tIx6OFg9.js | AI (source-diff): Bundled ESM output with long import lines; standard tsdown/rollup artifact for this SDK. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-d95UiY0V.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-DGHZJt7G.d.cts | AI (source-diff): TypeScript declaration file with long bundler-generated import lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/index-B7rS5iIF.d.ts | AI (source-diff): TypeScript declaration file with long bundler-generated import lines; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-BNYIha2C.js | AI (source-diff): Bundled ESM output with long import statements; standard tsdown build artifact for this SDK. | ai | |
| source-diff | obfuscated-file:dist/esm/index-Bn3JkjMQ.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-C_ioefRg.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-Cz0vkasG.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-BN6xAObK.js | AI (source-diff): Bundled ESM output with long import lines; standard tsdown build artifact for this SDK. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-YmLrS29a.d.cts | AI (source-diff): Long lines are bundler-generated TypeScript declaration files with many re-exports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-CWhjd9Yp.js | AI (source-diff): Bundler-generated ESM chunk with long import lines; readable named imports from known packages. | ai | |
| source-diff | obfuscated-file:dist/esm/index-DvOw3RHi.d.ts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-DYNILG8y.d.cts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-BpZGNLUP.js | AI (source-diff): Bundled ESM output with long import lines; standard tsdown/rollup output for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-D1bWAXoi.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-DJm-qDcY.d.cts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. Stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-CCP5OcIu.js | AI (source-diff): Rollup/tsdown chunk with long import lines; all imports are known packages. Standard build artifact. | ai | |
| source-diff | obfuscated-file:dist/esm/utils-D-LVHEfQ.js | AI (source-diff): Bundled utility chunk; readable code visible in sample. Standard build artifact for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/index-C4ebvHUB.d.ts | AI (source-diff): Bundler-generated TypeScript declaration file with long import lines; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-ByRa2IE-.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/index-DFreudT5.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-BWUlFM6L.js | AI (source-diff): Bundled ESM chunk with long import lines; standard tsdown/vite output for this SDK. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-Dz6elmkG.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large SDK with 1535 versions; new bundler chunks are expected across releases. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-CeD0R82a.js | AI (source-diff): Bundled ESM chunk with long import lines; standard tsdown/rollup output for this large SDK. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-CDh-fE3h.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/index-DLvkfrR5.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundler output; not obfuscated code. | ai | |
| source-diff | obfuscated-file:dist/esm/MsgSetDenomMetadata-CnbW6OG0.js | AI (source-diff): Bundled ESM chunk with long import lines; standard tsdown/rollup output for this large SDK. | ai | |
| phantom-deps | phantom-dep:google-protobuf | AI (phantom-deps): google-protobuf is a proto runtime dep used transitively; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@noble/hashes | AI (phantom-deps): @noble/hashes is a declared runtime dep used by crypto utilities; phantom-dep heuristic misfires here. | ai | |
| phantom-deps | phantom-dep:graphql | AI (phantom-deps): graphql is an optional peer dep exposed via ./graphql export path; not directly imported in main bundle. | ai | |
| phantom-deps | phantom-dep:shx | AI (phantom-deps): shx is a build-time tool used in scripts, not a runtime import; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/esm/index-Hj2qOUud.d.ts | AI (source-diff): Same pattern — bundled .d.ts type declaration with long import lines; false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-UE9sXMcw.d.cts | AI (source-diff): Bundled TypeScript declaration file with long import lines; not obfuscated code, stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/cjs/index-B7UsSUbZ.d.cts | AI (source-diff): TypeScript declaration file with long import lines from bundled type rollup; not executable obfuscation. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Package has 1511 versions; active SDK with CI/CD publishing via GitHub Actions with SLSA provenance. | ai | |
| source-diff | obfuscated-file:dist/esm/index-RA5Nj5kd.d.ts | AI (source-diff): TypeScript declaration file with long import lines from bundled type rollup; not executable obfuscation. | ai | |
| phantom-deps | phantom-dep:@injectivelabs/grpc-web-react-native-transport | AI (phantom-deps): Same-org transport dep; declared for peer resolution, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@injectivelabs/grpc-web-node-http-transport | AI (phantom-deps): Same-org transport dep; declared for peer resolution, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@injectivelabs/grpc-web | AI (phantom-deps): Same-org transport dep; declared for peer resolution, not directly imported in source. | ai | |
| phantom-deps | phantom-dep:@protobuf-ts/runtime | AI (phantom-deps): Referenced in config files for type generation; stable false positive for this package. | ai |
Versions (showing 49 of 49)
| Version | Deps | Published |
|---|---|---|
| 1.19.27 | 32 / 0 | |
| 1.19.20 | 32 / 0 | |
| 1.19.13 | 31 / 0 | |
| 1.19.12 | 31 / 0 | |
| 1.19.11 | 31 / 0 | |
| 1.19.8 | 31 / 0 | |
| 1.19.6 | 31 / 0 | |
| 1.19.3 | 31 / 0 | |
| 1.19.2 | 31 / 0 | |
| 1.19.1 | 31 / 0 | |
| 1.18.21 | 31 / 0 | |
| 1.18.7 | 31 / 0 | |
| 1.18.5 | 31 / 0 | |
| 1.18.4 | 31 / 0 | |
| 1.17.6 | 30 / 0 | |
| 1.17.5 | 30 / 0 | |
| 1.17.3 | 30 / 0 | |
| 1.17.2 | 30 / 0 | |
| 1.16.35 | 32 / 3 | |
| 1.16.34 | 32 / 3 | |
| 1.16.32 | 32 / 3 | |
| 1.16.31 | 32 / 3 | |
| 1.16.30 | 32 / 3 | |
| 1.16.28 | 32 / 3 | |
| 1.16.27 | 32 / 3 | |
| 1.16.24 | 32 / 3 | |
| 1.16.21 | 32 / 3 | |
| 1.16.20 | 32 / 3 | |
| 1.16.19 | 32 / 3 | |
| 1.16.16 | 32 / 3 | |
| 1.16.9 | 34 / 2 | |
| 1.16.8 | 34 / 2 | |
| 1.16.6 | 33 / 2 | |
| 1.16.4 | 33 / 2 | |
| 1.16.1 | 33 / 2 | |
| 1.15.39 | 33 / 2 | |
| 1.15.37 | 33 / 2 | |
| 1.15.34 | 33 / 2 | |
| 1.15.33 | 33 / 2 | |
| 1.15.32 | 33 / 2 | |
| 1.15.30 | 33 / 2 | |
| 1.15.20 | 34 / 2 | |
| 1.15.18 | 34 / 2 | |
| 1.15.17 | 34 / 2 | |
| 1.15.14 | 34 / 2 | |
| 1.15.11 | 34 / 2 | |
| 1.15.8 | 34 / 2 | |
| 1.15.7 | 34 / 2 | |
| 1.15.6 | 34 / 2 |
v1.19.27
5 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.20
6 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.13
5 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.12
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.11
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.8
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.6
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.3
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.19.2
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.21
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.7
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.5
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.18.4
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.6
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.5
3 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.3
4 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.17.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.16.35
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.34
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.32
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.31
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.30
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.28
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.27
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.24
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.21
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.9
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.4
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.16.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.39
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.37
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.34
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.33
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.32
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.30
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.18
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.8
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.7
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.15.6
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.