← Home

@metamask/gas-fee-controller

npm Repository Homepage
12
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

kumavisfrederikboldingmetamaskbotgudahttmrtenmcmirenaugtur

Keywords

EthereumMetaMask

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): MetaMask org migrated from metamaskbot to GitHub Actions CI; SLSA provenance confirms legitimate pipeline. ai
maintainer-change maintainer-added AI (maintainer-change): New maintainers are known MetaMask org members; consistent with monorepo team expansion. ai
phantom-deps phantom-dep:@types/uuid AI (phantom-deps): Type-only package in dependencies is a known MetaMask monorepo pattern; not a real phantom dep risk. ai
phantom-deps phantom-dep:@types/bn.js AI (phantom-deps): Type-only package in dependencies is a known MetaMask monorepo pattern; not a real phantom dep risk. ai
phantom-deps phantom-dep:@metamask/ethjs-unit AI (phantom-deps): Same-org sibling dep; may be used transitively or indirectly. Stable false positive for this package. ai

Versions (showing 12 of 12)

Version Deps Published
26.3.0 12 / 14
26.2.4 12 / 14
26.2.3 12 / 14
26.2.2 12 / 14
26.2.1 12 / 14
26.2.0 12 / 14
26.1.1 11 / 14
26.1.0 11 / 14
26.0.3 11 / 13
26.0.2 11 / 14
26.0.1 11 / 14
26.0.0 10 / 15

v26.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v26.2.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.