near-api-js
11
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
nearndyfrolnearmorganilblackdragonthisisjoshfordvolovyk-s
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 decoding of RPC response data is standard NEAR JSON-RPC API parsing; NEAR protocol returns binary data base64-encoded by design. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Hex decoding of contract code hashes is standard blockchain SDK behavior for NEAR Protocol; not a malicious payload indicator. | ai | |
| phantom-deps | phantom-dep:node-fetch | AI (phantom-deps): node-fetch is a well-known HTTP library; its use in this SDK is legitimate and the phantom-dep finding is a stable false positive. | ai | |
| phantom-deps | phantom-dep:@noble/curves | AI (phantom-deps): @noble/curves is a well-audited cryptography library; its use in a blockchain SDK is expected and the phantom-dep finding is a stable false positive. | ai | |
| phantom-deps | phantom-dep:http-errors | AI (phantom-deps): http-errors is a standard utility; phantom-dep heuristic fires but this is a stable false positive for this SDK package. | ai | |
| phantom-deps | phantom-dep:near-abi | AI (phantom-deps): near-abi is a NEAR ecosystem package declared as a dependency; phantom-dep heuristic fires because it's not directly imported in source but is a legitimate declared dep for this SDK. | ai | |
| provenance | no-provenance | AI (provenance): near-api-js is the official NEAR Protocol JS SDK published by the NEAR org; lack of Sigstore provenance is not a meaningful risk signal for this well-established package. | ai |