← Home

react-native-quick-crypto

npm Repository Homepage
27
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

mrousavyrenanmavboorad

Keywords

react-nativeiosandroidjsinitrocryptocryptographycryptocurrencyc++fastquickweb3

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:base64-decode AI (semgrep): Fires on standard JWK/key material decoding in a crypto library; expected and benign for this package. ai
phantom-deps phantom-dep:react-native-quick-base64 AI (phantom-deps): Platform-specific binary dep; not directly imported in JS but used via native layer — stable false positive for this package. ai
semgrep semgrep:hex-decode AI (semgrep): Hex decoding is standard crypto primitive handling (DH group primes); not obfuscation. ai
bogus-package bogus-package AI (bogus-package): mrousavy is a prolific legitimate RN author; templated naming and README structure are false positives here. ai
phantom-deps phantom-dep:events AI (phantom-deps): events is a declared runtime dependency used transitively; phantom-dep heuristic fires incorrectly. ai

Versions (showing 27 of 27)

Version Deps Published
1.1.6 6 / 12
1.1.5 6 / 12
1.1.4 6 / 12
1.1.3 6 / 12
1.1.2 6 / 12
1.1.1 6 / 12
1.1.0 6 / 12
1.0.19 6 / 12
1.0.18 6 / 12
1.0.17 6 / 12
1.0.16 6 / 12
1.0.15 6 / 12
1.0.14 6 / 12
1.0.13 6 / 12
1.0.12 6 / 12
1.0.11 5 / 11
1.0.10 5 / 11
1.0.9 5 / 11
1.0.8 6 / 11
1.0.7 6 / 11
1.0.6 6 / 11
1.0.5 6 / 11
1.0.4 6 / 11
1.0.3 6 / 11
1.0.2 6 / 11
1.0.1 6 / 11
1.0.0 7 / 10

v1.1.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.