@layerzerolabs/typescript-utils
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.pattern:typescript | AI (typosquat): Scoped @layerzerolabs package; 'typescript-utils' is a utility lib name, not impersonation of the typescript package. | ai |
Versions (showing 51 of 145)
| Version | Deps | Published |
|---|---|---|
| 0.2.102 | 0 / 4 | |
| 0.2.101 | 0 / 4 | |
| 0.2.100 | 0 / 4 | |
| 0.2.99 | 0 / 4 | |
| 0.2.98 | 0 / 4 | |
| 0.2.97 | 0 / 4 | |
| 0.2.96 | 0 / 4 | |
| 0.2.95 | 0 / 4 | |
| 0.2.94 | 0 / 4 | |
| 0.2.93 | 0 / 4 | |
| 0.2.92 | 0 / 4 | |
| 0.2.91 | 0 / 4 | |
| 0.2.90 | 0 / 4 | |
| 0.2.89 | 0 / 4 | |
| 0.2.88 | 0 / 4 | |
| 0.2.87 | 0 / 4 | |
| 0.2.86 | 0 / 4 | |
| 0.2.85 | 0 / 4 | |
| 0.2.84 | 0 / 4 | |
| 0.2.83 | 0 / 4 | |
| 0.2.82 | 0 / 4 | |
| 0.2.81 | 0 / 4 | |
| 0.2.80 | 0 / 4 | |
| 0.2.79 | 0 / 4 | |
| 0.2.78 | 0 / 4 | |
| 0.2.77 | 0 / 4 | |
| 0.2.76 | 0 / 4 | |
| 0.2.75 | 0 / 4 | |
| 0.2.74 | 0 / 4 | |
| 0.2.73 | 0 / 4 | |
| 0.2.72 | 0 / 4 | |
| 0.2.71 | 0 / 4 | |
| 0.2.70 | 0 / 4 | |
| 0.2.69 | 0 / 4 | |
| 0.2.68 | 0 / 4 | |
| 0.2.67 | 0 / 4 | |
| 0.2.66 | 0 / 4 | |
| 0.2.65 | 0 / 4 | |
| 0.2.64 | 0 / 4 | |
| 0.2.63 | 0 / 4 | |
| 0.2.62 | 0 / 4 | |
| 0.2.61 | 0 / 4 | |
| 0.2.60 | 0 / 4 | |
| 0.2.59 | 0 / 4 | |
| 0.2.58 | 0 / 4 | |
| 0.2.57 | 0 / 4 | |
| 0.2.56 | 0 / 4 | |
| 0.2.55 | 0 / 4 | |
| 0.2.54 | 0 / 4 | |
| 0.2.53 | 0 / 4 | |
| 0.2.52 | 0 / 4 |
v0.2.102
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v0.2.101
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.100
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.99
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.98
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.97
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.96
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.95
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.94
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.93
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.92
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.91
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.90
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.89
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.88
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.87
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.86
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.85
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.84
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.83
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.81
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.79
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.78
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.77
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.76
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.75
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.74
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.73
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.72
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.71
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.70
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.69
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.68
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.67
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.66
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.65
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.64
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.63
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.62
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.61
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.60
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.59
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.58
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.57
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.56
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.55
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.54
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.53
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.52
2 findingsPackage name '@layerzerolabs/typescript-utils' matches a known typosquatting pattern (hyphen swap, prefix/suffix) of 'typescript'.
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.