@keplr-wallet/hooks-starknet
51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
chainapsis
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from chainapsis account to GitHub Actions CI/CD with SLSA attestation; consistent repo URL and monorepo pattern. | ai | |
| phantom-deps | phantom-dep:long | AI (phantom-deps): Transitive/config-referenced dep in monorepo; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:utility-types | AI (phantom-deps): TypeScript utility types used in type declarations, not direct imports; stable false positive. | ai | |
| phantom-deps | phantom-dep:@ethersproject/address | AI (phantom-deps): Referenced in config/type context in monorepo; stable false positive. | ai | |
| phantom-deps | phantom-dep:@ethersproject/providers | AI (phantom-deps): Referenced in config/type context in monorepo; stable false positive. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Hex decode is used for Starknet address validation (strip 0x, check 32-byte length); not a malicious payload pattern. | ai | |
| phantom-deps | phantom-dep:@keplr-wallet/proto-types | AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic unreliable for monorepo peer/type usage. | ai | |
| phantom-deps | phantom-dep:@keplr-wallet/background | AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic unreliable for monorepo peer/type usage. | ai | |
| phantom-deps | phantom-dep:@keplr-wallet/stores-etc | AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic unreliable for monorepo peer/type usage. | ai | |
| phantom-deps | phantom-dep:@keplr-wallet/stores-eth | AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic unreliable for monorepo peer/type usage. | ai | |
| phantom-deps | phantom-dep:@keplr-wallet/crypto | AI (phantom-deps): Same-org monorepo sibling; phantom-dep heuristic unreliable for monorepo peer/type usage. | ai |
Versions (showing 51 of 215)
| Version | Deps | Published |
|---|---|---|
| 0.13.41 | 17 / 0 | |
| 0.13.40 | 17 / 0 | |
| 0.13.39 | 17 / 0 | |
| 0.13.38 | 17 / 0 | |
| 0.13.37 | 17 / 0 | |
| 0.13.36 | 17 / 0 | |
| 0.13.35 | 17 / 0 | |
| 0.13.34 | 17 / 0 | |
| 0.13.33 | 17 / 0 | |
| 0.13.32 | 17 / 0 | |
| 0.13.31 | 17 / 0 | |
| 0.13.30 | 17 / 0 | |
| 0.13.28 | 17 / 0 | |
| 0.13.27 | 17 / 0 | |
| 0.13.26 | 17 / 0 | |
| 0.13.24 | 17 / 0 | |
| 0.13.23 | 17 / 0 | |
| 0.13.22 | 17 / 0 | |
| 0.13.21 | 17 / 0 | |
| 0.13.20 | 17 / 0 | |
| 0.13.19 | 17 / 0 | |
| 0.13.18 | 17 / 0 | |
| 0.13.17 | 17 / 0 | |
| 0.13.16 | 17 / 0 | |
| 0.13.15 | 17 / 0 | |
| 0.13.14 | 17 / 0 | |
| 0.13.13 | 17 / 0 | |
| 0.13.12 | 17 / 0 | |
| 0.13.11 | 17 / 0 | |
| 0.13.10 | 17 / 0 | |
| 0.13.9 | 17 / 0 | |
| 0.13.8 | 17 / 0 | |
| 0.13.7 | 17 / 0 | |
| 0.13.6 | 17 / 0 | |
| 0.13.5 | 17 / 0 | |
| 0.13.4 | 17 / 0 | |
| 0.13.3 | 17 / 0 | |
| 0.13.2 | 17 / 0 | |
| 0.13.1 | 17 / 0 | |
| 0.13.0 | 17 / 0 | |
| 0.12.313 | 17 / 0 | |
| 0.12.312 | 17 / 0 | |
| 0.12.311 | 17 / 0 | |
| 0.12.310 | 17 / 0 | |
| 0.12.309 | 17 / 0 | |
| 0.12.308 | 17 / 0 | |
| 0.12.307 | 17 / 0 | |
| 0.12.306 | 17 / 0 | |
| 0.12.305 | 17 / 0 | |
| 0.12.304 | 17 / 0 | |
| 0.12.300 | 17 / 0 |
v0.13.41
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.13.40
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.