← Home

@metamask/assets-controller

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

kumavisfrederikboldingmetamaskbotgudahttmrtenmcmirenaugtur

Keywords

EthereumMetaMask

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): MetaMask migrated to GitHub Actions CI/CD publishing; SLSA provenance confirms legitimacy. ai
maintainer-change maintainer-added AI (maintainer-change): gudahtt is a known MetaMask core contributor; addition is consistent with org-level maintainer management. ai
phantom-deps phantom-dep:@metamask/keyring-api AI (phantom-deps): Same org scope; likely used transitively or in type declarations rather than direct imports. ai

Versions (showing 51 of 52)

View all versions
Version Deps Published
11.2.0 30 / 11
11.1.1 30 / 11
11.1.0 30 / 11
11.0.0 29 / 11
10.2.1 29 / 11
10.2.0 29 / 11
10.1.0 29 / 11
10.0.1 29 / 11
10.0.0 29 / 11
9.1.0 29 / 11
9.0.2 29 / 11
9.0.1 29 / 11
9.0.0 29 / 11
8.3.3 29 / 11
8.3.2 29 / 11
8.3.1 29 / 11
8.3.0 29 / 11
8.2.0 29 / 11
8.1.0 29 / 11
8.0.2 29 / 11
8.0.1 29 / 11
8.0.0 29 / 11
7.1.2 29 / 11
7.1.1 29 / 11
7.1.0 29 / 11
7.0.1 29 / 11
7.0.0 29 / 11
6.4.0 29 / 11
6.3.0 29 / 11
6.2.1 29 / 11
6.2.0 29 / 11
6.1.0 29 / 11
6.0.0 29 / 11
5.0.1 28 / 11
5.0.0 28 / 11
4.0.0 28 / 11
3.3.0 27 / 11
3.2.1 27 / 11
3.2.0 27 / 11
3.1.1 27 / 11
3.1.0 27 / 11
3.0.0 27 / 11
2.4.0 27 / 11
2.3.0 27 / 11
2.2.0 27 / 11
2.1.0 27 / 11
2.0.2 25 / 11
2.0.1 25 / 11
2.0.0 25 / 10
1.0.0 22 / 10
0.2.0 22 / 10

v11.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v11.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v11.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v11.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.2.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.2.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.1.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v10.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.