@uniswap/default-token-list
51
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
uniswap-labs-service-accountuniswap-labs-owner-account
Keywords
uniswapdefaulttokenlist
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Uniswap migrated publishing to GitHub Actions CI with SLSA attestation; this transition is expected and verifiable. | ai |
Versions (showing 51 of 59)
| Version | Deps | Published |
|---|---|---|
| 22.6.0 | 0 / 8 | |
| 22.5.0 | 0 / 8 | |
| 22.4.0 | 0 / 8 | |
| 22.3.0 | 0 / 8 | |
| 22.2.0 | 0 / 8 | |
| 22.1.0 | 0 / 8 | |
| 22.0.0 | 0 / 8 | |
| 21.3.0 | 0 / 8 | |
| 21.2.0 | 0 / 8 | |
| 21.1.0 | 0 / 8 | |
| 21.0.0 | 0 / 8 | |
| 20.10.0 | 0 / 8 | |
| 20.9.0 | 0 / 8 | |
| 20.8.0 | 0 / 8 | |
| 20.7.0 | 0 / 8 | |
| 20.6.0 | 0 / 8 | |
| 20.5.0 | 0 / 8 | |
| 20.4.0 | 0 / 8 | |
| 20.3.0 | 0 / 8 | |
| 20.2.0 | 0 / 8 | |
| 20.1.0 | 0 / 8 | |
| 20.0.0 | 0 / 8 | |
| 19.9.0 | 0 / 8 | |
| 19.8.0 | 0 / 8 | |
| 19.7.0 | 0 / 8 | |
| 19.6.0 | 0 / 8 | |
| 19.4.0 | 0 / 8 | |
| 19.3.0 | 0 / 8 | |
| 19.2.0 | 0 / 8 | |
| 19.1.0 | 0 / 8 | |
| 19.0.0 | 0 / 8 | |
| 18.14.0 | 0 / 8 | |
| 18.13.0 | 0 / 8 | |
| 18.12.0 | 0 / 8 | |
| 18.11.0 | 0 / 8 | |
| 18.10.0 | 0 / 8 | |
| 18.9.0 | 0 / 8 | |
| 18.8.0 | 0 / 8 | |
| 18.7.0 | 0 / 8 | |
| 18.6.0 | 0 / 8 | |
| 18.5.0 | 0 / 8 | |
| 18.4.0 | 0 / 8 | |
| 18.3.0 | 0 / 8 | |
| 18.2.0 | 0 / 8 | |
| 18.1.0 | 0 / 8 | |
| 18.0.0 | 0 / 8 | |
| 17.0.0 | 0 / 8 | |
| 16.12.0 | 0 / 8 | |
| 16.11.0 | 0 / 8 | |
| 16.9.0 | 0 / 8 | |
| 16.8.0 | 0 / 8 |
v22.6.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v22.5.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v22.4.0
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.