← Home

@uniswap/default-token-list

npm Repository Homepage
59
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

uniswap-labs-service-accountuniswap-labs-owner-account

Keywords

uniswapdefaulttokenlist

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Uniswap migrated publishing to GitHub Actions CI with SLSA attestation; this transition is expected and verifiable. ai

Versions (showing 59 of 59)

Version Deps Published
22.6.0 0 / 8
22.5.0 0 / 8
22.4.0 0 / 8
22.3.0 0 / 8
22.2.0 0 / 8
22.1.0 0 / 8
22.0.0 0 / 8
21.3.0 0 / 8
21.2.0 0 / 8
21.1.0 0 / 8
21.0.0 0 / 8
20.10.0 0 / 8
20.9.0 0 / 8
20.8.0 0 / 8
20.7.0 0 / 8
20.6.0 0 / 8
20.5.0 0 / 8
20.4.0 0 / 8
20.3.0 0 / 8
20.2.0 0 / 8
20.1.0 0 / 8
20.0.0 0 / 8
19.9.0 0 / 8
19.8.0 0 / 8
19.7.0 0 / 8
19.6.0 0 / 8
19.4.0 0 / 8
19.3.0 0 / 8
19.2.0 0 / 8
19.1.0 0 / 8
19.0.0 0 / 8
18.14.0 0 / 8
18.13.0 0 / 8
18.12.0 0 / 8
18.11.0 0 / 8
18.10.0 0 / 8
18.9.0 0 / 8
18.8.0 0 / 8
18.7.0 0 / 8
18.6.0 0 / 8
18.5.0 0 / 8
18.4.0 0 / 8
18.3.0 0 / 8
18.2.0 0 / 8
18.1.0 0 / 8
18.0.0 0 / 8
17.0.0 0 / 8
16.12.0 0 / 8
16.11.0 0 / 8
16.9.0 0 / 8
16.8.0 0 / 8
16.7.0 0 / 8
16.6.0 0 / 8
16.5.0 0 / 8
16.3.0 0 / 8
16.2.0 0 / 8
16.1.0 0 / 8
16.0.0 0 / 8
15.2.0 0 / 8

v22.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v22.5.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v22.4.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.