← Home

@metamask/solana-wallet-snap

npm Repository

A Solana wallet Snap.

41
Versions
(MIT-0 OR Apache-2.0)
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

kumavisfrederikboldingmetamaskbotgudahttmrtenmcmirenaugtur

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Legitimate CI migration from metamaskbot to GitHub Actions with SLSA provenance from MetaMask org. ai
license uncommon-license:MIT-0 AI (license): (MIT-0 OR Apache-2.0) is the package's established license; stable across versions. ai

Versions (showing 41 of 41)

Version Deps Published
3.0.0 0 / 34
2.11.0 0 / 34
2.10.0 0 / 34
2.9.1 0 / 34
2.9.0 0 / 34
2.8.0 0 / 34
2.7.4 0 / 34
2.7.3 0 / 34
2.7.2 0 / 34
2.7.1 0 / 34
2.6.2 0 / 34
2.6.1 0 / 34
2.6.0 0 / 34
2.5.1 0 / 34
2.5.0 0 / 34
2.4.8 0 / 34
2.4.7 0 / 33
2.4.6 0 / 33
2.4.5 0 / 33
2.4.4 0 / 33
2.4.3 0 / 33
2.4.2 0 / 33
2.4.1 0 / 33
2.4.0 0 / 33
2.3.11 0 / 33
2.3.10 0 / 33
2.3.9 0 / 33
2.3.8 0 / 33
2.3.7 0 / 33
2.3.6 0 / 33
2.3.5 0 / 33
2.3.4 0 / 33
2.3.3 0 / 33
2.3.2 0 / 33
2.3.1 0 / 33
2.3.0 0 / 33
2.2.0 0 / 33
2.1.4 0 / 33
2.1.3 0 / 33
2.1.0 0 / 33
2.0.0 0 / 33

v3.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.11.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.10.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.