← Home

@mysten/bcs

npm Repository Homepage
7
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

ebmifahayespaul-mystenrushrs

Keywords

bcslibradiemmoveserializationserde

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:qs AI (typosquat): @mysten/bcs is a legitimate scoped package from Mysten Labs; Levenshtein match to 'qs' is a false positive for scoped org packages. ai
dependencies unvetted-dep:@mysten/utils AI (dependencies): @mysten/utils is a first-party dependency from the same Mysten Labs org; not an external unvetted dependency. ai
phantom-deps phantom-dep:@scure/base AI (phantom-deps): @scure/base is a declared runtime dependency; phantom-dep flag is a false positive for this package's build/import structure. ai

Versions (showing 7 of 7)

Version Deps Published
2.0.5 2 / 4
2.0.4 2 / 4
2.0.3 2 / 4
2.0.2 2 / 4
2.0.1 2 / 4
2.0.0 2 / 4
1.9.2 2 / 5

v2.0.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.