@metamask/bridge-controller
Manages bridge-related quote fetching functionality for MetaMask
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from metamaskbot to GitHub Actions CI/CD with SLSA provenance; legitimate org-wide migration. | ai | |
| dependencies | unvetted-dep:@metamask/assets-controller | AI (dependencies): First-party MetaMask package; stable false positive for this ecosystem. | ai | |
| provenance | no-provenance | AI (provenance): MetaMask core packages consistently lack Sigstore provenance; stable false positive for this publisher. | ai |
Versions (showing 89 of 89)
| Version | Deps | Published |
|---|---|---|
| 78.0.0 | 25 / 15 | |
| 77.8.0 | 25 / 15 | |
| 77.7.0 | 25 / 15 | |
| 77.6.0 | 25 / 15 | |
| 77.5.0 | 25 / 15 | |
| 77.4.1 | 25 / 15 | |
| 77.4.0 | 25 / 15 | |
| 77.3.2 | 25 / 15 | |
| 77.3.1 | 25 / 15 | |
| 77.3.0 | 25 / 15 | |
| 77.2.0 | 25 / 15 | |
| 77.1.0 | 25 / 15 | |
| 77.0.0 | 25 / 15 | |
| 76.1.0 | 25 / 15 | |
| 76.0.0 | 25 / 15 | |
| 75.2.1 | 25 / 15 | |
| 75.2.0 | 25 / 15 | |
| 75.1.1 | 25 / 15 | |
| 75.1.0 | 25 / 15 | |
| 75.0.0 | 25 / 15 | |
| 74.0.0 | 25 / 15 | |
| 73.2.1 | 25 / 15 | |
| 73.2.0 | 25 / 15 | |
| 73.1.0 | 25 / 15 | |
| 73.0.1 | 25 / 15 | |
| 73.0.0 | 25 / 15 | |
| 72.0.4 | 25 / 15 | |
| 72.0.3 | 25 / 15 | |
| 72.0.2 | 25 / 15 | |
| 72.0.1 | 25 / 15 | |
| 72.0.0 | 25 / 15 | |
| 71.1.1 | 25 / 15 | |
| 71.1.0 | 25 / 15 | |
| 71.0.0 | 25 / 15 | |
| 70.2.0 | 25 / 15 | |
| 70.1.1 | 25 / 15 | |
| 70.1.0 | 25 / 15 | |
| 70.0.1 | 25 / 14 | |
| 70.0.0 | 25 / 14 | |
| 69.2.3 | 25 / 14 | |
| 69.2.2 | 25 / 14 | |
| 69.2.1 | 25 / 14 | |
| 69.2.0 | 25 / 14 | |
| 69.1.1 | 25 / 14 | |
| 69.1.0 | 25 / 14 | |
| 69.0.1 | 25 / 14 | |
| 69.0.0 | 25 / 14 | |
| 68.0.0 | 24 / 14 | |
| 67.4.0 | 24 / 14 | |
| 67.3.0 | 24 / 14 | |
| 67.2.0 | 24 / 14 | |
| 67.1.1 | 24 / 14 | |
| 67.1.0 | 24 / 14 | |
| 67.0.0 | 24 / 14 | |
| 66.2.0 | 23 / 14 | |
| 66.1.1 | 23 / 14 | |
| 66.1.0 | 23 / 14 | |
| 66.0.0 | 23 / 14 | |
| 65.3.0 | 23 / 14 | |
| 65.2.0 | 23 / 14 | |
| 65.1.0 | 23 / 14 | |
| 65.0.1 | 23 / 14 | |
| 65.0.0 | 23 / 14 | |
| 64.8.2 | 23 / 14 | |
| 64.8.1 | 23 / 14 | |
| 64.8.0 | 23 / 14 | |
| 64.7.0 | 23 / 14 | |
| 64.6.1 | 23 / 14 | |
| 64.6.0 | 23 / 14 | |
| 64.5.1 | 23 / 14 | |
| 64.5.0 | 23 / 14 | |
| 64.4.1 | 23 / 14 | |
| 64.4.0 | 23 / 14 | |
| 64.3.0 | 23 / 14 | |
| 64.2.0 | 23 / 14 | |
| 64.1.0 | 23 / 14 | |
| 64.0.0 | 23 / 14 | |
| 63.2.0 | 23 / 14 | |
| 63.1.0 | 23 / 14 | |
| 63.0.0 | 17 / 20 | |
| 62.0.0 | 17 / 20 | |
| 61.0.0 | 17 / 20 | |
| 60.1.0 | 17 / 20 | |
| 60.0.0 | 17 / 20 | |
| 59.0.0 | 17 / 20 | |
| 58.0.0 | 17 / 19 | |
| 57.0.0 | 17 / 19 | |
| 56.0.3 | 17 / 19 | |
| 56.0.2 | 17 / 19 |
v78.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.8.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.6.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.5.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.4.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.4.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.3.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.3.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.3.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.2.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v77.1.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.