← Home

@zkp2p/sdk

29
Versions
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

0xsachinkrichardliangkartik4152prlabsdavyjonespeer

Keywords

zkp2ppeersdkdepositsliquidityfiatcryptoviemreactreact-hooksweb3ethereumbasetypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/vaultUtils-Bi2uldoa.d.ts AI (source-diff): TypeScript declaration file generated by tsup; long lines are bundled type unions, not obfuscation. ai
source-diff obfuscated-file:dist/vaultUtils-Bi2uldoa.d.mts AI (source-diff): TypeScript declaration file generated by tsup; long lines are bundled type unions, not obfuscation. ai
source-diff obfuscated-file:dist/vaultUtils-BZU2bc0T.d.ts AI (source-diff): Same as .d.mts counterpart — bundled .d.ts with long type union lines, not obfuscated code. ai
source-diff obfuscated-file:dist/vaultUtils-BZU2bc0T.d.mts AI (source-diff): Bundled TypeScript declaration file; long lines are from type concatenation, not obfuscation. Stable pattern for this package. ai
source-diff obfuscated-file:dist/Zkp2pClient-BwGN8dWD.d.ts AI (source-diff): Bundled TypeScript declaration file from tsup; long lines are type rollup artifacts, not obfuscation. ai
source-diff obfuscated-file:dist/Zkp2pClient-BwGN8dWD.d.mts AI (source-diff): Bundled TypeScript declaration file from tsup; long lines are type rollup artifacts, not obfuscation. ai
source-diff obfuscated-file:dist/vaultUtils-Dt7ZOITQ.d.ts AI (source-diff): TypeScript declaration file generated by tsup; long lines are bundled type exports, not obfuscated code. ai
source-diff obfuscated-file:dist/vaultUtils-Dt7ZOITQ.d.mts AI (source-diff): TypeScript declaration file generated by tsup; long lines are bundled type exports, not obfuscated code. ai
source-diff obfuscated-file:dist/vaultUtils-BL8tzsmH.d.ts AI (source-diff): TypeScript declaration file with long lines from bundled type rollup; not obfuscated code. ai
source-diff obfuscated-file:dist/vaultUtils-BL8tzsmH.d.mts AI (source-diff): TypeScript declaration file with long lines from bundled type rollup; not obfuscated code. ai
source-diff obfuscated-file:dist/vaultUtils-CyPf4QGT.d.mts AI (source-diff): TypeScript declaration file with long lines from bundled type exports; not obfuscated code. ai
source-diff obfuscated-file:dist/vaultUtils-CyPf4QGT.d.ts AI (source-diff): TypeScript declaration file with long lines from bundled type exports; not obfuscated code. ai
dependencies unvetted-dep:@zkp2p/core AI (dependencies): Same-org sibling package in a monorepo workspace; not an external unvetted third-party dependency. ai
phantom-deps phantom-dep:@zkp2p/core AI (phantom-deps): Same-org monorepo sibling package; workspace:* dependency is a standard monorepo pattern, not a phantom dep risk. ai
dependencies unvetted-dep:@zkp2p/contracts-v2 AI (dependencies): Same-org first-party dependency from the zkp2p organization; expected for this SDK package. ai
phantom-deps phantom-dep:@zkp2p/contracts-v2 AI (phantom-deps): Same-org dependency declared for type definitions or transitive use; not a security concern. ai
dependencies unvetted-dep:ox AI (dependencies): ox is a legitimate, well-known Ethereum primitives library; appropriate dependency for a Web3/ZKP SDK. ai

Versions (showing 29 of 29)

Version Deps Published
0.5.0 5 / 22
0.4.3 5 / 22
0.4.2 5 / 22
0.4.1 5 / 22
0.4.0 5 / 22
0.3.2 4 / 22
0.3.1 4 / 22
0.3.0 4 / 22
0.2.4 4 / 22
0.2.3 4 / 22
0.2.1 4 / 22
0.2.0 4 / 22
0.1.1 4 / 22
0.1.0 4 / 22
0.0.15 3 / 18
0.0.14 3 / 18
0.0.13 3 / 18
0.0.12 3 / 18
0.0.11 3 / 18
0.0.10 3 / 18
0.0.9 3 / 18
0.0.8 3 / 18
0.0.7 3 / 18
0.0.6 3 / 17
0.0.5 3 / 17
0.0.4 4 / 17
0.0.3 4 / 17
0.0.2 4 / 17
0.0.1 4 / 17