← Home

@magic-ext/wallet-kit

npm Repository Homepage

Magic SDK Wallet Kit Extension

9
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

seanliethellahcotevcastrillojasonatmagicmagiclabs_fejonathansoperdizigenjmac-magicnoahyoshidaernieyang09rush.deshpandejfifer-b9sjosh_scanlan

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/es/index.mjs AI (source-diff): Standard rollup+terser minified bundle; imports are all legitimate known packages with no obfuscation indicators. ai
source-diff net-exec-file:dist/es/index.mjs AI (source-diff): Network calls and dynamic execution are from wagmi/WalletConnect/appkit SDK patterns, not dropper behavior. ai
phantom-deps phantom-dep:libphonenumber-js AI (phantom-deps): Bundled dependency; not directly imported in source but legitimately used via bundled output. ai
phantom-deps phantom-dep:@magiclabs/ui-components AI (phantom-deps): First-party Magic Labs dep; bundled into dist output, not directly imported in source files. ai

Versions (showing 9 of 9)

Version Deps Published
0.13.0 7 / 16
0.12.0 7 / 16
0.11.1 7 / 16
0.11.0 7 / 16
0.10.0 7 / 16
0.9.0 7 / 16
0.8.3 7 / 16
0.7.0 6 / 16
0.1.0 0 / 0

v0.13.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v0.12.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v0.11.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.

v0.11.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v0.2). This is the strongest supply chain integrity signal.