← Home

@parity/dotns-cli

21
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

parity-jacogrjacogrparitytechkianenigmawirednkoddvdplmmcornholioparitytech-cinachopalparitypepostefan-sopicvincecorsica

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff encoded-string-file:dist/cli.js AI (source-diff): Long strings are inlined ABI JSON data in a bundled CLI; not obfuscation. Stable pattern for this package. ai
npm-metadata url-dep:@polkadot-api/descriptors AI (npm-metadata): papi generates local descriptors as a file dep; this is the documented workflow for polkadot-api projects. ai
phantom-deps phantom-dep:chalk AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:helia AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:commander AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:ipfs-unixfs AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@ipld/dag-pb AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:multiformats AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:polkadot-api AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@helia/unixfs AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@noble/hashes AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:ora AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@libp2p/websockets AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@polkadot-labs/hdkd AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@multiformats/blake2 AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:ipfs-unixfs-importer AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@polkadot/util-crypto AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@chainsafe/libp2p-noise AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@chainsafe/libp2p-yamux AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@multiformats/multiaddr AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:@polkadot/keyring AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai
phantom-deps phantom-dep:viem AI (phantom-deps): Bundled CLI with bun; phantom-dep heuristic unreliable for bundled outputs. ai

Versions (showing 21 of 21)

Version Deps Published
0.7.5 24 / 9
0.7.4 24 / 9
0.7.3 24 / 9
0.7.2 23 / 9
0.7.1 23 / 9
0.7.0 23 / 9
0.6.9 23 / 9
0.6.8 23 / 9
0.6.7 23 / 9
0.6.6 23 / 8
0.6.5 23 / 8
0.6.4 23 / 8
0.6.3 23 / 8
0.6.2 23 / 8
0.6.1 23 / 8
0.6.0 23 / 8
0.5.6 23 / 8
0.5.5 23 / 8
0.5.4 23 / 8
0.5.3 23 / 8
0.5.2 23 / 8

v0.7.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.