@metamask/test-dapp-solana
A test dapp for solana
4
Versions
ISC
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
danfinlaykumavismcmirerekmarksmetamaskbotgudahttnicholasellulsethkfmannaugtur
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/assets/index-BJ3ArbZR.js | AI (source-diff): Standard Vite/React minified bundle output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/assets/index-D0Dd_1AJ.js | AI (source-diff): Standard Vite minified bundle with base58/Solana wallet code; not malicious. | ai | |
| source-diff | obfuscated-file:dist/assets/index-DyrvK8VE.js | AI (source-diff): Standard Vite minified bundle with base58/Solana wallet code; not malicious. | ai | |
| phantom-deps | phantom-dep:@solana/web3.js | AI (phantom-deps): Solana dapp dependency used via build config; phantom-dep is a false positive for bundled apps. | ai | |
| phantom-deps | phantom-dep:@solana/spl-token | AI (phantom-deps): Solana dapp dependency; false positive for bundled frontend. | ai | |
| phantom-deps | phantom-dep:vite-plugin-node-polyfills | AI (phantom-deps): Vite plugin referenced in config file, not direct import. | ai | |
| phantom-deps | phantom-dep:@solana/wallet-adapter-base | AI (phantom-deps): Solana wallet adapter; false positive for bundled frontend app. | ai | |
| phantom-deps | phantom-dep:react | AI (phantom-deps): Bundled frontend app; React consumed via JSX transform, not direct import. | ai | |
| phantom-deps | phantom-dep:@solana/wallet-standard-util | AI (phantom-deps): Solana wallet standard; false positive for bundled frontend app. | ai | |
| phantom-deps | phantom-dep:@solana/wallet-adapter-wallets | AI (phantom-deps): Solana wallet adapter; false positive for bundled frontend app. | ai | |
| phantom-deps | phantom-dep:@solana/wallet-standard-chains | AI (phantom-deps): Solana wallet standard; false positive for bundled frontend app. | ai | |
| phantom-deps | phantom-dep:@solana/wallet-adapter-react-ui | AI (phantom-deps): Solana wallet adapter UI; false positive for bundled frontend app. | ai | |
| phantom-deps | phantom-dep:@solana/wallet-adapter-react | AI (phantom-deps): Solana wallet adapter; false positive for bundled frontend app. | ai | |
| phantom-deps | phantom-dep:react-dom | AI (phantom-deps): Bundled frontend app; react-dom used via build tooling, not direct import. | ai | |
| phantom-deps | phantom-dep:buffer | AI (phantom-deps): Node polyfill for browser bundle; referenced in vite config, not direct import. | ai |
Versions (showing 4 of 4)
| Version | Deps | Published |
|---|---|---|
| 0.3.1 | 12 / 17 | |
| 0.3.0 | 12 / 17 | |
| 0.2.0 | 12 / 17 | |
| 0.1.0 | 12 / 17 |
v0.1.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.