@metamask/bridge-controller
Manages bridge-related quote fetching functionality for MetaMask
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from metamaskbot to GitHub Actions CI/CD with SLSA provenance; legitimate org-wide migration. | ai | |
| dependencies | unvetted-dep:@metamask/assets-controller | AI (dependencies): First-party MetaMask package; stable false positive for this ecosystem. | ai | |
| provenance | no-provenance | AI (provenance): MetaMask core packages consistently lack Sigstore provenance; stable false positive for this publisher. | ai |
Versions (showing 51 of 89)
| Version | Deps | Published |
|---|---|---|
| 78.0.0 | 25 / 15 | |
| 77.8.0 | 25 / 15 | |
| 77.7.0 | 25 / 15 | |
| 77.6.0 | 25 / 15 | |
| 77.5.0 | 25 / 15 | |
| 77.4.1 | 25 / 15 | |
| 77.4.0 | 25 / 15 | |
| 77.3.2 | 25 / 15 | |
| 77.3.1 | 25 / 15 | |
| 77.3.0 | 25 / 15 | |
| 77.2.0 | 25 / 15 | |
| 77.1.0 | 25 / 15 | |
| 77.0.0 | 25 / 15 | |
| 76.1.0 | 25 / 15 | |
| 76.0.0 | 25 / 15 | |
| 75.2.1 | 25 / 15 | |
| 75.2.0 | 25 / 15 | |
| 75.1.1 | 25 / 15 | |
| 75.1.0 | 25 / 15 | |
| 75.0.0 | 25 / 15 | |
| 74.0.0 | 25 / 15 | |
| 73.2.1 | 25 / 15 | |
| 73.2.0 | 25 / 15 | |
| 73.1.0 | 25 / 15 | |
| 73.0.1 | 25 / 15 | |
| 73.0.0 | 25 / 15 | |
| 72.0.4 | 25 / 15 | |
| 72.0.3 | 25 / 15 | |
| 72.0.2 | 25 / 15 | |
| 72.0.1 | 25 / 15 | |
| 72.0.0 | 25 / 15 | |
| 71.1.1 | 25 / 15 | |
| 71.1.0 | 25 / 15 | |
| 71.0.0 | 25 / 15 | |
| 70.2.0 | 25 / 15 | |
| 70.1.1 | 25 / 15 | |
| 70.1.0 | 25 / 15 | |
| 70.0.1 | 25 / 14 | |
| 70.0.0 | 25 / 14 | |
| 69.2.3 | 25 / 14 | |
| 69.2.2 | 25 / 14 | |
| 69.2.1 | 25 / 14 | |
| 69.2.0 | 25 / 14 | |
| 69.1.1 | 25 / 14 | |
| 69.1.0 | 25 / 14 | |
| 69.0.1 | 25 / 14 | |
| 69.0.0 | 25 / 14 | |
| 68.0.0 | 24 / 14 | |
| 67.4.0 | 24 / 14 | |
| 67.3.0 | 24 / 14 | |
| 67.2.0 | 24 / 14 |
v78.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.8.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.6.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.5.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.4.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.4.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.3.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.3.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.3.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.2.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.1.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.