@substrate/smoldot-light
Light client that connects to Polkadot and Substrate-based blockchains
51
Versions
GPL-3.0-or-later WITH Classpath-exception-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
harrysolovaymarshacbimod7curlybracketeffectalexandru.vasilejimmychu0807paritytech-ciandreierestomakagoldsteinsvetajacogrkianenigmajoepetrowskijeluarddvdplmwirednkodraoulmillaisniklasad1jsdw
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | encoded-string-file:dist/worker/autogen/wasm0.js | AI (source-diff): smoldot ships compiled Rust/WASM binaries as embedded encoded strings in JS files — this is the package's core distribution mechanism, not malicious obfuscation. | ai | |
| source-diff | encoded-string-file:dist/worker/autogen/wasm1.js | AI (source-diff): Same as wasm0.js — embedded WASM binary blob, expected for this package's architecture. | ai | |
| source-diff | encoded-string-file:dist/worker/autogen/wasm2.js | AI (source-diff): Same as wasm0.js — embedded WASM binary blob, expected for this package's architecture. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 decoding is used to embed WASM bytecode for cross-platform distribution — a standard and documented pattern for this package. Not a malicious payload indicator. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Established Parity Technologies package (1720 days, 93 versions). README link structure reflects blockchain ecosystem documentation norms, not a phishing link farm. | ai | |
| source-diff | obfuscated-file:dist/cjs/instance/autogen/wasm0.js | AI (source-diff): Content is base64-encoded WebAssembly binary data embedded as JS strings — standard smoldot pattern for shipping WASM in npm packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mjs/instance/autogen/wasm2.js | AI (source-diff): Content is base64-encoded WebAssembly binary data embedded as JS strings — standard smoldot pattern for shipping WASM in npm packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mjs/instance/autogen/wasm0.js | AI (source-diff): Content is base64-encoded WebAssembly binary data embedded as JS strings — standard smoldot pattern for shipping WASM in npm packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/instance/autogen/wasm1.js | AI (source-diff): Content is base64-encoded WebAssembly binary data embedded as JS strings — standard smoldot pattern for shipping WASM in npm packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/mjs/instance/autogen/wasm1.js | AI (source-diff): Content is base64-encoded WebAssembly binary data embedded as JS strings — standard smoldot pattern for shipping WASM in npm packages. Not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/cjs/instance/autogen/wasm2.js | AI (source-diff): Content is base64-encoded WebAssembly binary data embedded as JS strings — standard smoldot pattern for shipping WASM in npm packages. Not malicious obfuscation. | ai |
Versions (showing 51 of 73)
| Version | Deps | Published |
|---|---|---|
| 0.7.9 | 2 / 8 | |
| 0.7.6 | 2 / 8 | |
| 0.6.32 | 2 / 7 | |
| 0.6.28 | 2 / 7 | |
| 0.6.23 | 3 / 7 | |
| 0.6.22 | 3 / 7 | |
| 0.6.21 | 3 / 7 | |
| 0.6.20 | 3 / 7 | |
| 0.6.19 | 3 / 7 | |
| 0.6.18 | 3 / 7 | |
| 0.6.17 | 3 / 7 | |
| 0.6.16 | 3 / 7 | |
| 0.6.15 | 3 / 7 | |
| 0.6.14 | 3 / 7 | |
| 0.6.13 | 3 / 7 | |
| 0.6.12 | 3 / 7 | |
| 0.6.11 | 3 / 7 | |
| 0.6.10 | 3 / 7 | |
| 0.6.9 | 3 / 7 | |
| 0.6.8 | 3 / 7 | |
| 0.6.7 | 3 / 7 | |
| 0.6.6 | 3 / 7 | |
| 0.6.5 | 3 / 7 | |
| 0.6.4 | 3 / 7 | |
| 0.6.3 | 3 / 7 | |
| 0.6.2 | 3 / 7 | |
| 0.6.1 | 3 / 7 | |
| 0.6.0 | 3 / 7 | |
| 0.5.21 | 3 / 7 | |
| 0.5.20 | 3 / 7 | |
| 0.5.19 | 3 / 7 | |
| 0.5.18 | 3 / 7 | |
| 0.5.17 | 3 / 7 | |
| 0.5.16 | 3 / 7 | |
| 0.5.15 | 3 / 7 | |
| 0.5.14 | 3 / 7 | |
| 0.5.13 | 5 / 3 | |
| 0.5.12 | 5 / 3 | |
| 0.5.11 | 5 / 3 | |
| 0.5.10 | 5 / 3 | |
| 0.5.9 | 4 / 3 | |
| 0.5.8 | 4 / 3 | |
| 0.5.7 | 4 / 3 | |
| 0.5.6 | 4 / 3 | |
| 0.5.5 | 4 / 3 | |
| 0.5.4 | 4 / 3 | |
| 0.5.3 | 4 / 3 | |
| 0.5.2 | 4 / 3 | |
| 0.5.1 | 4 / 3 | |
| 0.5.0 | 4 / 3 | |
| 0.4.21 | 4 / 3 |