← Home

@uniswap/universal-router-sdk

npm Repository Homepage
36
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

uniswap-labs-service-accountuniswap-labs-owner-account

Keywords

uniswapethereum

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@uniswap/v2-core AI (phantom-deps): ABI/type reference from same org; not a direct import, stable pattern for this package. ai
phantom-deps phantom-dep:@uniswap/v3-core AI (phantom-deps): ABI/type reference from same org; not a direct import, stable pattern for this package. ai
phantom-deps phantom-dep:@openzeppelin/contracts AI (phantom-deps): Referenced in config files only; common pattern for Solidity SDKs that reference contract ABIs. ai

Versions (showing 36 of 36)

Version Deps Published
5.11.0 17 / 12
5.10.0 17 / 12
5.9.0 17 / 12
5.8.0 17 / 12
5.7.0 17 / 12
5.6.0 17 / 12
5.5.2 17 / 12
5.5.1 17 / 12
5.5.0 17 / 12
5.4.0 17 / 12
5.3.0 17 / 12
5.2.0 17 / 12
5.1.0 17 / 12
5.0.0 17 / 12
4.35.0 17 / 12
4.34.2 12 / 14
4.34.1 12 / 14
4.34.0 12 / 14
4.33.0 12 / 14
4.32.0 12 / 14
4.31.0 12 / 14
4.30.0 12 / 14
4.29.5 12 / 14
4.29.4 12 / 14
4.29.3 12 / 14
4.29.2 12 / 14
4.29.1 12 / 14
4.29.0 12 / 14
4.28.0 12 / 14
4.27.0 12 / 14
4.26.0 12 / 14
4.25.0 12 / 14
4.24.0 12 / 14
4.23.0 12 / 14
4.22.0 12 / 14
4.21.0 12 / 14

v5.11.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.10.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.