@worldcoin/minikit-js
9
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
paolodamicoandy_tfh
Keywords
minikitminiapps
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | slsa-provenance | AI (provenance): SLSA provenance via Sigstore is a stable, positive signal for this package's CI/CD pipeline. | ai | |
| source-diff | obfuscated-file:build/types-D_X89fCc.d.cts | AI (source-diff): TypeScript declaration files (.d.cts) generated by tsup bundler with long lines; content is human-readable type definitions, not obfuscated executable code. Stable false positive for this build toolchain. | ai | |
| source-diff | obfuscated-file:build/types-B3FhypWE.d.ts | AI (source-diff): TypeScript declaration files (.d.ts) generated by tsup bundler with long lines; content is human-readable type definitions, not obfuscated executable code. Stable false positive for this build toolchain. | ai |