@phantom/browser-sdk
Browser SDK for Phantom Wallet
10
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
joe-phantomfragostiphantom-security-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@phantom/client | AI (dependencies): Internal @phantom org dependency; expected for this monorepo SDK package. | ai | |
| dependencies | unvetted-dep:@phantom/embedded-provider-core | AI (dependencies): Internal @phantom org dependency; expected for this monorepo SDK package. | ai | |
| phantom-deps | phantom-dep:tweetnacl | AI (phantom-deps): tweetnacl is a declared runtime dep; phantom-dep heuristic fires on config-only reference, stable FP for this package. | ai | |
| phantom-deps | phantom-dep:jose | AI (phantom-deps): jose is a declared runtime dep; phantom-dep heuristic fires on config-only reference, stable FP for this package. | ai | |
| phantom-deps | phantom-dep:@phantom/indexed-db-stamper | AI (phantom-deps): Same-org scoped dep; phantom-dep heuristic is unreliable for monorepo packages. | ai | |
| phantom-deps | phantom-dep:@phantom/sdk-types | AI (phantom-deps): Same-org scoped dep; phantom-dep heuristic is unreliable for monorepo type-only packages. | ai | |
| phantom-deps | phantom-dep:axios | AI (phantom-deps): axios is a declared runtime dep; phantom-dep heuristic fires on config-only reference, stable FP for this package. | ai |