@polkadot/primitives-codec
Encoding for primitives as runtime execution inputs
51
Versions
ISC
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
jacogr
Keywords
Polkadot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): @polkadot/util-keyring is a same-org package from the same trusted polkadot-js publisher; adding it is a natural ecosystem dependency, not a supply chain risk. | ai | |
| source-diff | encoded-string-file:block/encode.spec.js | AI (source-diff): Long byte array in test file is a legitimate encoding test vector (expected Uint8Array output), not a malicious payload. Pattern is stable for this test-heavy codec package. | ai | |
| phantom-deps | phantom-dep:@polkadot/primitives | AI (phantom-deps): Same-org sibling package in the polkadot-js monorepo; declared as a dependency and used transitively. Not a real phantom dep risk. | ai | |
| phantom-deps | phantom-dep:@polkadot/util-keyring | AI (phantom-deps): Same-org sibling dependency declared but not directly imported; consistent with polkadot-js monorepo packaging patterns. Not a security concern. | ai | |
| provenance | no-provenance | AI (provenance): Established package from highly trusted publisher (jacogr, 1163 approvals). Lack of provenance attestation is not a meaningful risk signal here. | ai |
Versions (showing 51 of 112)
| Version | Deps | Published |
|---|---|---|
| 0.25.3 | 6 / 0 | |
| 0.25.2 | 6 / 0 | |
| 0.25.1 | 6 / 0 | |
| 0.20.3 | 6 / 0 | |
| 0.20.2 | 6 / 0 | |
| 0.20.1 | 6 / 0 | |
| 0.19.5 | 6 / 0 | |
| 0.19.4 | 6 / 0 | |
| 0.19.3 | 6 / 0 | |
| 0.19.2 | 6 / 0 | |
| 0.19.1 | 6 / 0 | |
| 0.18.2 | 6 / 0 | |
| 0.17.28 | 6 / 0 | |
| 0.17.27 | 6 / 0 | |
| 0.17.26 | 6 / 0 | |
| 0.17.25 | 6 / 0 | |
| 0.17.24 | 6 / 0 | |
| 0.17.23 | 6 / 0 | |
| 0.17.22 | 6 / 0 | |
| 0.17.21 | 6 / 0 | |
| 0.17.20 | 6 / 0 | |
| 0.17.19 | 6 / 0 | |
| 0.17.18 | 6 / 0 | |
| 0.17.17 | 6 / 0 | |
| 0.17.16 | 6 / 0 | |
| 0.17.15 | 6 / 0 | |
| 0.17.14 | 6 / 0 | |
| 0.17.13 | 6 / 0 | |
| 0.17.12 | 6 / 0 | |
| 0.17.11 | 6 / 0 | |
| 0.17.10 | 6 / 0 | |
| 0.17.9 | 6 / 0 | |
| 0.17.8 | 6 / 0 | |
| 0.17.7 | 6 / 0 | |
| 0.17.6 | 6 / 0 | |
| 0.17.5 | 6 / 0 | |
| 0.17.4 | 6 / 0 | |
| 0.17.3 | 6 / 0 | |
| 0.17.2 | 6 / 0 | |
| 0.17.1 | 6 / 0 | |
| 0.16.15 | 6 / 0 | |
| 0.16.14 | 6 / 0 | |
| 0.16.13 | 6 / 0 | |
| 0.16.12 | 6 / 0 | |
| 0.16.11 | 6 / 0 | |
| 0.16.10 | 6 / 0 | |
| 0.16.9 | 6 / 0 | |
| 0.16.8 | 6 / 0 | |
| 0.16.7 | 6 / 0 | |
| 0.16.6 | 6 / 0 | |
| 0.16.5 | 6 / 0 |