← Home

@wormhole-foundation/sdk-evm-ntt

NTT SDK for EVM chains

26
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

wormhole-cidrlambowh

Keywords

wormholesdktypescriptnttevm

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/esm/ethers-contracts/1_3_1/factories/WormholeTransceiver__factory.d.ts AI (source-diff): Typechain-generated .d.ts with long type signatures, not obfuscation. ai
source-diff large-new-source-files AI (source-diff): New ABI version directory (1_3_1) from typechain codegen, expected for contract upgrades. ai
source-diff obfuscated-file:dist/esm/ethers-contracts/1_3_1/factories/NttManager__factory.js AI (source-diff): Autogenerated TypeChain ethers-v6 factory with large ABI array; long lines are ABI JSON, not obfuscation. ai
source-diff obfuscated-file:dist/esm/ethers-contracts/2_0_0/factories/NttManager__factory.js AI (source-diff): Autogenerated TypeChain ethers-v6 factory with large ABI array; long lines are ABI JSON, not obfuscation. ai
source-diff obfuscated-file:dist/cjs/ethers-contracts/1_3_1/factories/WormholeTransceiver__factory.js AI (source-diff): Autogenerated TypeChain ethers-v6 factory with large ABI array; long lines are ABI JSON, not obfuscation. ai
source-diff obfuscated-file:dist/cjs/ethers-contracts/2_0_0/factories/WormholeTransceiver__factory.js AI (source-diff): Autogenerated TypeChain ethers-v6 factory with large ABI array; long lines are ABI JSON, not obfuscation. ai
source-diff obfuscated-file:dist/esm/ethers-contracts/1_3_1/factories/WormholeTransceiver__factory.js AI (source-diff): Autogenerated TypeChain ethers-v6 factory with large ABI array; long lines are ABI JSON, not obfuscation. ai
source-diff obfuscated-file:dist/esm/ethers-contracts/2_0_0/factories/WormholeTransceiver__factory.js AI (source-diff): Autogenerated TypeChain ethers-v6 factory with large ABI array; long lines are ABI JSON, not obfuscation. ai
source-diff obfuscated-file:dist/cjs/ethers-contracts/1_3_1/factories/NttManager__factory.js AI (source-diff): Autogenerated TypeChain ethers-v6 factory with large ABI array; long lines are ABI JSON, not obfuscation. ai
source-diff obfuscated-file:dist/cjs/ethers-contracts/2_0_0/factories/NttManager__factory.d.ts AI (source-diff): TypeChain-generated .d.ts with large ABI type definitions; long lines are type declarations, not obfuscation. ai
source-diff obfuscated-file:dist/esm/ethers-contracts/1_3_1/factories/NttManager__factory.d.ts AI (source-diff): TypeChain-generated .d.ts with large ABI type definitions; long lines are type declarations, not obfuscation. ai
source-diff obfuscated-file:dist/esm/ethers-contracts/2_0_0/factories/NttManager__factory.d.ts AI (source-diff): TypeChain-generated .d.ts with large ABI type definitions; long lines are type declarations, not obfuscation. ai
source-diff obfuscated-file:dist/cjs/ethers-contracts/1_3_1/factories/WormholeTransceiver__factory.d.ts AI (source-diff): TypeChain-generated .d.ts with large ABI type definitions; long lines are type declarations, not obfuscation. ai
source-diff obfuscated-file:dist/cjs/ethers-contracts/2_0_0/factories/WormholeTransceiver__factory.d.ts AI (source-diff): TypeChain-generated .d.ts with large ABI type definitions; long lines are type declarations, not obfuscation. ai
source-diff obfuscated-file:dist/cjs/ethers-contracts/1_3_1/factories/NttManager__factory.d.ts AI (source-diff): TypeChain-generated .d.ts with large ABI type definitions; long lines are type declarations, not obfuscation. ai
source-diff obfuscated-file:dist/cjs/ethers-contracts/2_0_0/factories/NttManager__factory.js AI (source-diff): Autogenerated TypeChain ethers-v6 factory with large ABI array; long lines are ABI JSON, not obfuscation. ai

Versions (showing 26 of 26)

Version Deps Published
7.2.0 2 / 3
7.1.0 2 / 3
7.0.0 2 / 3
6.3.0 2 / 3
6.2.0 2 / 3
6.1.0 2 / 3
6.0.0 2 / 3
5.0.2 2 / 3
5.0.1 2 / 3
5.0.0 2 / 3
4.0.17 2 / 3
4.0.16 2 / 3
4.0.15 2 / 3
4.0.14 2 / 3
4.0.13 2 / 3
4.0.12 2 / 3
4.0.11 2 / 3
4.0.10 2 / 3
4.0.9 2 / 3
4.0.8 2 / 3
4.0.7 2 / 3
4.0.6 2 / 3
4.0.5 2 / 3
4.0.4 2 / 3
4.0.3 2 / 3
4.0.2 2 / 3

v4.0.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.0.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.0.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.0.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.0.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.0.12

2 findings
HIGH New obfuscated file: dist/esm/ethers-contracts/1_3_1/factories/WormholeTransceiver__factory.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v4.0.11

2 findings
HIGH New obfuscated file: dist/esm/ethers-contracts/1_3_1/factories/WormholeTransceiver__factory.d.ts source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.