← Home

@keplr-wallet/stores

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

chainapsis

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing with SLSA attestation from official chainapsis repo; legitimate CI/CD migration. ai
publish-pattern dormant-publish AI (publish-pattern): Package has 1003 versions and 10 approved-dep edges; dormancy flag is a false positive for this actively maintained package. ai
semgrep semgrep:base64-decode AI (semgrep): Base64 decoding is used for cryptographic signature handling in a wallet library; stable pattern across versions. ai
phantom-deps phantom-dep:eventemitter3 AI (phantom-deps): eventemitter3 is a declared runtime dependency; phantom-dep heuristic false positive for this package. ai

Versions (showing 51 of 260)

View all versions
Version Deps Published
0.13.41 16 / 1
0.13.40 16 / 1
0.13.39 16 / 1
0.13.38 15 / 1
0.13.37 15 / 1
0.13.36 15 / 1
0.13.35 15 / 1
0.13.34 15 / 1
0.13.33 15 / 1
0.13.32 15 / 1
0.13.31 15 / 1
0.13.30 14 / 1
0.13.28 14 / 1
0.13.27 14 / 1
0.13.26 14 / 1
0.13.24 14 / 1
0.13.23 14 / 1
0.13.22 14 / 1
0.13.21 14 / 1
0.13.20 14 / 1
0.13.19 14 / 1
0.13.18 14 / 1
0.13.17 14 / 1
0.13.16 14 / 1
0.13.15 14 / 1
0.13.14 14 / 1
0.13.13 14 / 1
0.13.12 14 / 1
0.13.11 14 / 1
0.13.10 14 / 1
0.13.9 14 / 1
0.13.8 14 / 1
0.13.7 14 / 1
0.13.6 14 / 1
0.13.5 14 / 1
0.13.4 14 / 1
0.13.3 14 / 1
0.13.2 14 / 1
0.13.1 14 / 1
0.13.0 14 / 1
0.12.313 14 / 1
0.12.312 14 / 1
0.12.311 14 / 1
0.12.310 14 / 1
0.12.309 14 / 1
0.12.308 14 / 1
0.12.307 14 / 1
0.12.306 14 / 1
0.12.305 14 / 1
0.12.304 14 / 1
0.12.300 14 / 1

v0.13.41

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.13.40

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.