← Home

@wormhole-foundation/sdk-xrpl

npm Repository Homepage
27
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

wormhole-cidrlambowh

Keywords

wormholesdktypescriptconnectxrpl

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@wormhole-foundation/sdk-connect AI (dependencies): First-party sibling package from same org/monorepo; expected dependency for this SDK. ai

Versions (showing 27 of 27)

Version Deps Published
6.1.4 2 / 0
6.1.3 2 / 0
6.1.2 2 / 0
6.1.1 2 / 0
6.1.0 2 / 0
6.0.0 2 / 0
5.2.0 2 / 0
5.1.0 2 / 0
5.0.0 2 / 0
4.24.0 2 / 0
4.23.0 2 / 0
4.22.0 2 / 0
4.21.0 2 / 0
4.20.0 2 / 0
4.19.0 2 / 0
4.18.0 2 / 0
4.17.1 2 / 0
4.17.0 2 / 0
4.16.0 2 / 0
4.15.0 2 / 0
4.14.1 2 / 0
4.14.0 2 / 0
4.13.1 2 / 0
4.13.0 2 / 0
4.12.2 2 / 0
4.12.1 2 / 0
4.12.0 2 / 0

v6.1.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.1.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.1.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.1.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.