← Home

@taquito/rpc

npm Repository Homepage
9
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

jevonearthroxaneletourneauhui-an.yanggimbrailo.ecad

Keywords

taquitotezostypescriptblockchainrpcclient

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
typosquat typosquat.levenshtein:pg AI (typosquat): @taquito/rpc is a scoped package in the well-established Taquito ecosystem with 249 versions; no plausible impersonation of the unrelated 'pg' PostgreSQL package. ai
dependencies unvetted-dep:@taquito/core AI (dependencies): First-party sibling package from the same Taquito monorepo, always co-released at the same version. ai
dependencies unvetted-dep:@taquito/utils AI (dependencies): First-party sibling package from the same Taquito monorepo, always co-released at the same version. ai
dependencies unvetted-dep:@taquito/http-utils AI (dependencies): First-party sibling package from the same Taquito monorepo, always co-released at the same version. ai

Versions (showing 9 of 9)

Version Deps Published
25.0.0 4 / 21
24.3.0 4 / 21
24.2.0 5 / 26
24.1.0 5 / 26
24.0.2 5 / 26
24.0.1 5 / 26
24.0.0 5 / 26
23.1.0 4 / 26
23.0.3 4 / 25

v25.0.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.