@qtumproject/qtum-wallet
Qtum Wallet is a MetaMask Snap that plays the role of the RPC proxy that accepts requests to the MetaMask and forwards them to the Qtum network with the Qtum ethers adapter.
1
Versions
(MIT-0 OR Apache-2.0)
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
alejoacostadl_kyrylomikehash81dannnymackmeherett
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:intl | AI (phantom-deps): Config-referenced dep consistent with MetaMask Snap build setup. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): Config-referenced dep consistent with MetaMask Snap build setup. | ai | |
| phantom-deps | phantom-dep:typia | AI (phantom-deps): Used via typia:generate script; config-referenced. | ai | |
| phantom-deps | phantom-dep:buffer | AI (phantom-deps): Polyfill dep, likely bundled via esbuild. | ai | |
| phantom-deps | phantom-dep:ethers | AI (phantom-deps): Bundled via esbuild; config-referenced. | ai | |
| phantom-deps | phantom-dep:lodash | AI (phantom-deps): Bundled via esbuild; config-referenced. | ai | |
| phantom-deps | phantom-dep:qtumjs-lib | AI (phantom-deps): Core Qtum lib, bundled via esbuild. | ai | |
| phantom-deps | phantom-dep:setimmediate | AI (phantom-deps): Polyfill dep, bundled via esbuild. | ai | |
| phantom-deps | phantom-dep:key-did-resolver | AI (phantom-deps): DID resolver dep, bundled via esbuild. | ai | |
| phantom-deps | phantom-dep:eth-block-tracker | AI (phantom-deps): Ethereum block tracker, bundled via esbuild. | ai | |
| phantom-deps | phantom-dep:@metamask/snaps-sdk | AI (phantom-deps): Core MetaMask Snap SDK dep, bundled. | ai | |
| phantom-deps | phantom-dep:qtum-ethers-wrapper | AI (phantom-deps): Core Qtum ethers wrapper, bundled. | ai | |
| phantom-deps | phantom-dep:@metamask/snaps-jest | AI (phantom-deps): Test dep listed in dependencies; config-referenced. | ai | |
| phantom-deps | phantom-dep:@metamask/snaps-utils | AI (phantom-deps): MetaMask utils dep, bundled. | ai | |
| phantom-deps | phantom-dep:key-did-provider-ed25519 | AI (phantom-deps): DID provider dep, bundled. | ai | |
| phantom-deps | phantom-dep:@ethersproject/properties | AI (phantom-deps): Ethers sub-package, bundled. | ai | |
| phantom-deps | phantom-dep:@metamask/metamask-eth-abis | AI (phantom-deps): MetaMask ABI dep, bundled. | ai | |
| phantom-deps | phantom-dep:@ethersproject/abstract-signer | AI (phantom-deps): Ethers sub-package, bundled. | ai | |
| phantom-deps | phantom-dep:@ethersproject/abstract-provider | AI (phantom-deps): Ethers sub-package, bundled. | ai | |
| phantom-deps | phantom-dep:@metamask/transaction-controller | AI (phantom-deps): MetaMask transaction controller, bundled. | ai |
Versions (showing 1 of 1)
| Version | Deps | Published |
|---|---|---|
| 0.2.0 | 21 / 24 |
v0.2.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.