@terminal3/t3n-sdk — Greenflagged

T3n TypeScript SDK - A minimal SDK that mirrors the server's RPC handler approach

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

nik-t3edward-fu-t3matthew-t3jeff-t3phuc-t3trha

Keywords

t3nblockchainsdktypescriptwasmcryptographyauthentication

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	obfuscated-file:dist/src/wasm/quote-verifier/quote_verifier_bytes.d.ts	AI (source-diff): Base64 WASM binary embedded as const, not code obfuscation.	ai	2026/07/07
phantom-deps	phantom-dep:canonicalize	AI (phantom-deps): Likely bundled into obfuscated dist; phantom detection is a false positive for this package.	ai	2026/07/01
phantom-deps	phantom-dep:@noble/curves	AI (phantom-deps): Likely bundled into obfuscated dist; phantom detection is a false positive for this package.	ai	2026/07/01
phantom-deps	phantom-dep:@noble/hashes	AI (phantom-deps): Likely bundled into obfuscated dist; phantom detection is a false positive for this package.	ai	2026/07/01
phantom-deps	phantom-dep:ethers	AI (phantom-deps): ethers is a well-known Ethereum library; its indirect use via WASM-generated or bundled code is consistent with this blockchain SDK's purpose.	ai	2026/04/25
phantom-deps	phantom-dep:@bytecodealliance/jco	AI (phantom-deps): jco is used as a build/runtime tool for WASM component model; indirect import via config/generated code is expected for this WASM SDK.	ai	2026/04/25

Versions (showing 1 of 1)

Version	Deps	Published
0.2.1	3 / 25	2026-03-30

v0.2.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.