← Home

@lifi/sdk

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

lifi

Keywords

swapbridgebridge-aggregationcross-chaincross-chain-applicationscross-chain-bridgedappdefiethereumbitcoinsolanasuitronlifimulti-chainsdkethersviemwagmiweb3web3-react

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:bech32 AI (phantom-deps): Declared but not directly imported; stable false positive for this package. ai

Versions (showing 100 of 115)

Version Deps Published
4.3.0 1 / 0
4.2.0 1 / 0
3.16.3 12 / 0
3.16.2 12 / 0
3.16.1 12 / 0
3.16.0 12 / 0
3.15.7 12 / 0
3.15.6 12 / 0
3.15.5 12 / 0
3.15.4 12 / 0
3.15.3 12 / 0
3.15.2 12 / 0
3.15.1 12 / 0
3.15.0 12 / 0
3.14.1 12 / 0
3.14.0 12 / 0
3.13.7 12 / 0
3.13.6 12 / 0
3.13.5 12 / 0
3.13.4 12 / 0
3.13.3 12 / 0
3.13.2 12 / 0
3.13.1 12 / 0
3.13.0 12 / 0
3.12.14 12 / 0
3.12.13 12 / 0
3.12.12 12 / 0
3.12.11 12 / 0
3.12.10 12 / 0
3.12.9 12 / 0
3.12.8 12 / 0
3.12.7 12 / 0
3.12.6 12 / 0
3.12.5 12 / 0
3.12.4 12 / 0
3.12.3 12 / 0
3.12.2 12 / 0
3.12.1 12 / 0
3.12.0 12 / 0
3.11.4 12 / 0
3.11.3 12 / 0
3.11.2 12 / 0
3.11.1 12 / 0
3.11.0 12 / 0
3.10.1 12 / 0
3.10.0 12 / 0
3.9.3 12 / 0
3.9.2 12 / 0
3.9.1 12 / 0
3.9.0 12 / 0
3.8.11 11 / 0
3.8.10 11 / 0
3.8.9 11 / 0
3.8.8 11 / 0
3.8.7 11 / 0
3.8.6 11 / 0
3.8.5 11 / 0
3.8.4 11 / 0
3.8.3 11 / 0
3.8.2 11 / 0
3.8.1 11 / 0
3.8.0 11 / 0
3.7.11 11 / 0
3.7.10 11 / 0
3.7.9 11 / 0
3.7.8 11 / 0
3.7.7 11 / 0
3.7.6 11 / 0
3.7.5 11 / 0
3.7.4 11 / 0
3.7.3 11 / 0
3.7.2 11 / 0
3.7.1 11 / 0
3.7.0 11 / 0
3.6.16 9 / 0
3.6.15 9 / 0
3.6.14 9 / 0
3.6.13 9 / 0
3.6.12 9 / 0
3.6.11 9 / 0
3.6.10 9 / 0
3.6.9 9 / 0
3.6.8 9 / 0
3.6.7 9 / 0
3.6.6 9 / 0
3.6.5 9 / 0
3.6.4 9 / 0
3.6.3 9 / 0
3.6.2 9 / 0
3.6.1 9 / 0
3.6.0 9 / 0
3.5.4 9 / 0
3.5.3 9 / 0
3.5.2 9 / 0
3.5.1 9 / 0
3.5.0 10 / 0
3.4.4 10 / 0
3.4.3 10 / 0
3.4.2 10 / 0
3.4.1 10 / 0
Showing 100 of 115 Next page →

v4.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.2.0

2 findings
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

INFO Publisher changed: lifi → GitHub Actions (on 2026-07-17, now via trusted publisher with provenance) provenance

This version was published by a different npm account (GitHub Actions) than the most recent previously approved version (lifi) on 2026-07-17, but it carries Sigstore provenance attestation. This means the package moved to a trusted publisher (CI/CD with OIDC, e.g. GitHub Actions) — a supply-chain integrity improvement, not a compromise, since a stolen npm token cannot forge provenance bound to the source repository. Recorded as INFO for audit trail.

v3.6.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.5.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.5.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.5.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.5.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v3.4.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.