@polkadot-api/sdk-ink
14
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
volivajosepot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/esm/.papi/descriptors/dist/metadataTypes-PFA3TI6G.mjs | AI (source-diff): SCALE-encoded chain metadata as base64 string — standard papi codegen output. | ai | |
| source-diff | encoded-string-file:dist/index.js | AI (source-diff): Same SCALE/base64 metadata blobs bundled into dist/index.js — expected papi build artifact. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase explained by bundled chain metadata descriptors (741KB .mjs files) added in this version. | ai | |
| source-diff | obfuscated-file:dist/esm/.papi/descriptors/dist/descriptors-GFVXYJWQ.mjs | AI (source-diff): Polkadot chain descriptor JSON blob — standard papi codegen output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/esm/.papi/descriptors/dist/wndAh_metadata-ZNXXSRSB.mjs | AI (source-diff): SCALE-encoded Westend Asset Hub metadata — standard papi codegen output. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Sparse metadata is typical for polkadot-api ecosystem scoped packages; not indicative of malice. | ai | |
| phantom-deps | phantom-dep:abitype | AI (phantom-deps): abitype is a declared runtime dep used for type-level utilities; phantom-dep false positive for this package. | ai |