@openclaw/whatsapp
OpenClaw WhatsApp channel plugin
9
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
steipetevincentkoc
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:etc-passwd-access | AI (semgrep): Appears only in a test asserting path-traversal is blocked; not runtime credential harvesting. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Test-only: decodes a QR PNG to verify its magic bytes; no payload hiding. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Test fixture using 127.0.0.1 to assert private-network requests are blocked. | ai | |
| phantom-deps | phantom-dep:jimp | AI (phantom-deps): jimp is declared in dependencies and used via config/indirect import; stable false positive for this package. | ai |