@verii/metadata-registration
Package allows interacting with the smart contracts, based on ethers.js
14
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
lfdt-npmhyperledger-ghci
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:eth-url-parser | AI (dependencies): eth-url-parser is a legitimate Ethereum URL parsing utility; its use is consistent with this package's blockchain/smart contract interaction purpose. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 encoding in code-jwk.js is standard JWK cryptographic key serialization, not payload obfuscation. Stable false positive for this crypto/blockchain package. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Hex decoding in metadata-registry.js strips Ethereum 0x prefix — canonical pattern for reading blockchain hex values. Not malicious payload hiding. | ai | |
| phantom-deps | phantom-dep:@verii/blockchain-functions | AI (phantom-deps): Same-org monorepo dependency; indirect/runtime usage is expected in this package structure. | ai | |
| phantom-deps | phantom-dep:@verii/contract-permissions | AI (phantom-deps): Same-org monorepo dependency; indirect/runtime usage is expected in this package structure. | ai |