← Home

@solana/keychain-core

12
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

solana-devs

Keywords

solanasigningwalletprivyvaultturnkey

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata suspicious-initial-version AI (npm-metadata): v0.0.0 is a known placeholder pattern for the solana-devs org; not indicative of malice. ai
bogus-package bogus-package AI (bogus-package): Placeholder/namespace-reservation package from a trusted publisher with 14 approved dependents. ai
npm-metadata no-description AI (npm-metadata): Consistent with placeholder package from trusted solana-devs publisher. ai

Versions (showing 12 of 12)

Version Deps Published
1.4.0 0 / 8
1.3.0 0 / 8
1.2.0 0 / 7
1.1.0 0 / 7
1.0.1 0 / 7
0.6.1 0 / 7
0.6.0 6 / 1
0.5.0 6 / 0
0.4.0 6 / 0
0.3.0 6 / 0
0.2.1 6 / 0
0.0.0 0 / 0