← Home

@xmtp/node-sdk

npm Repository Homepage
12
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

xmtp-eng-robotgalligannick-xmtp

Keywords

xmtpmessagingweb3jsjavascriptnodenodejs

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@xmtp/node-bindings AI (dependencies): First-party XMTP native binding; stable dependency for this package across versions. ai
provenance no-provenance AI (provenance): Package explicitly sets provenance:false in publishConfig; consistent across XMTP org packages. ai
provenance slsa-provenance AI (provenance): XMTP publishes via CI/CD with Sigstore attestation consistently; stable for this package. ai

Versions (showing 12 of 12)

Version Deps Published
6.0.0 2 / 16
5.5.0 2 / 16
5.3.0 2 / 16
5.1.1 2 / 16
5.0.1 2 / 16
5.0.0 2 / 16
4.6.0 4 / 17
4.5.1 4 / 17
4.4.0 4 / 17
4.3.0 4 / 17
4.2.6 4 / 17
4.2.5 4 / 17