← Home

@lifi/data-types

Data types for the LI.FI stack

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

lifi

Keywords

sdkethereumdappbridgeswapweb3lifietherscross-chaindefiweb3-reactcross-chain-applicationscross-chain-bridgebridge-aggregationmulti-chainmetamask

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI/CD publishing is confirmed by SLSA provenance attestation. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy explained by CI/CD pipeline migration; SLSA attestation confirms legitimate publish. ai
semgrep semgrep:shady-links-tlds AI (semgrep): All flagged URLs are legitimate blockchain explorer endpoints in chain config data, not C2/exfiltration infrastructure. ai

Versions (showing 51 of 136)

View all versions
Version Deps Published
6.83.0 1 / 0
6.82.4 1 / 0
6.82.3 1 / 0
6.82.2 1 / 0
6.82.1 1 / 0
6.82.0 1 / 0
6.81.1 1 / 0
6.80.1 1 / 0
6.80.0 1 / 0
6.79.1 1 / 0
6.79.0 1 / 0
6.78.1 1 / 0
6.78.0 1 / 0
6.77.3 1 / 0
6.77.2 1 / 0
6.77.1 1 / 0
6.77.0 1 / 0
6.76.0 1 / 0
6.75.0 1 / 0
6.74.0 1 / 0
6.73.1 1 / 0
6.73.0 1 / 0
6.72.0 1 / 0
6.71.0 1 / 0
6.70.0 1 / 0
6.69.0 1 / 0
6.68.0 1 / 0
6.67.0 1 / 0
6.66.0 1 / 0
6.65.0 1 / 0
6.64.0 1 / 0
6.63.1 1 / 0
6.63.0 1 / 0
6.62.0 1 / 0
6.61.1 1 / 0
6.61.0 1 / 0
6.60.1 1 / 0
6.60.0 1 / 0
6.59.0 1 / 0
6.58.0 1 / 0
6.57.1 1 / 0
6.57.0 1 / 0
6.56.0 1 / 0
6.55.2 1 / 0
6.55.1 1 / 0
6.55.0 1 / 0
6.54.1 1 / 0
6.54.0 1 / 0
6.53.0 1 / 0
6.52.0 1 / 0
6.51.0 1 / 0

v6.83.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.82.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.82.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.