@polkadot-api/substrate-client
22
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
volivajosepot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): voliva is an established polkadot-api contributor (21 approved packages, 566 days history); SLSA attestation confirms CI/CD build from official repo, ruling out account compromise. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): SLSA provenance attestation confirms the release originated from the official polkadot-api CI pipeline; dormancy reflects release cadence, not account takeover. | ai | |
| dependencies | unvetted-dep:@polkadot-api/utils | AI (dependencies): First-party sibling package from the same polkadot-api monorepo; unvetted status reflects pipeline gap, not genuine risk. | ai | |
| dependencies | unvetted-dep:@polkadot-api/raw-client | AI (dependencies): First-party sibling package from the same polkadot-api monorepo; unvetted status reflects pipeline gap, not genuine risk. | ai | |
| dependencies | unvetted-dep:@polkadot-api/json-rpc-provider | AI (dependencies): First-party sibling package from the same polkadot-api monorepo; unvetted status reflects pipeline gap, not genuine risk. | ai |
Versions (showing 22 of 22)
| Version | Deps | Published |
|---|---|---|
| 0.7.0 | 3 / 0 | |
| 0.6.0 | 3 / 0 | |
| 0.5.0 | 3 / 0 | |
| 0.4.7 | 3 / 0 | |
| 0.4.6 | 3 / 0 | |
| 0.4.5 | 3 / 0 | |
| 0.4.4 | 3 / 0 | |
| 0.4.3 | 3 / 0 | |
| 0.4.2 | 3 / 0 | |
| 0.4.1 | 2 / 0 | |
| 0.4.0 | 2 / 0 | |
| 0.3.0 | 2 / 0 | |
| 0.2.2 | 2 / 0 | |
| 0.2.1 | 2 / 0 | |
| 0.2.0 | 2 / 0 | |
| 0.1.4 | 2 / 0 | |
| 0.1.3 | 1 / 1 | |
| 0.1.2 | 0 / 2 | |
| 0.1.1 | 0 / 2 | |
| 0.1.0 | 0 / 2 | |
| 0.0.2 | 0 / 2 | |
| 0.0.1 | 0 / 2 |