@libp2p/interfaces Apache-2.0 OR MIT 51 versions

@libp2p/interfaces

npm Repository Homepage

Common code shared by the various libp2p interfaces

51

Versions

Apache-2.0 OR MIT

License

No

Install Scripts

Missing

Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

jacobheunnpm-service-account-libp2palanshawvascosantosachingbraindaviddias

Keywords

interfacelibp2p

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
npm-metadata	suspicious-initial-version	AI (npm-metadata): 0.0.0 is the legitimate initial placeholder version for this established libp2p package with 71 versions and 4+ years of history.	ai	2026/04/24
bogus-package	bogus-package	AI (bogus-package): Signals reflect a stub/placeholder initial release by a highly trusted publisher (achingbrain, 913 approved packages). Not indicative of spam or malice.	ai	2026/04/24
provenance	publisher-changed	AI (provenance): libp2p project migrated to npm-service-account-libp2p for automated CI/CD publishing; this is a documented org-level transition, not a compromise. Service account has 209 approved / 0 rejected packages.	ai	2026/04/24
maintainer-change	maintainer-added	AI (maintainer-change): Addition of npm-service-account-libp2p and jacobheun reflects the libp2p project's standard maintainer structure; consistent with org-level governance, not a takeover.	ai	2026/04/24

Versions (showing 51 of 62)

View all versions

Version	Deps	Published
3.3.2	0 / 1	2023-05-04
3.3.1	0 / 1	2023-01-18
3.3.0	0 / 1	2023-01-17
3.2.0	0 / 1	2023-01-03
3.1.0	0 / 1	2022-12-19
3.0.6	0 / 1	2022-12-16
3.0.5	0 / 1	2022-12-14
3.0.4	0 / 1	2022-11-05
3.0.3	0 / 1	2022-06-27
3.0.2	0 / 1	2022-06-14
3.0.1	0 / 1	2022-06-14
3.0.0	0 / 1	2022-06-14
2.0.4	6 / 1	2022-06-14
2.0.3	4 / 1	2022-05-31
2.0.2	4 / 1	2022-05-24
2.0.1	4 / 1	2022-05-23
2.0.0	4 / 1	2022-05-20
1.3.32	4 / 1	2022-05-06
1.3.31	4 / 1	2022-05-04
1.3.30	4 / 1	2022-05-04
1.3.29	4 / 1	2022-05-03
1.3.28	4 / 1	2022-05-01
1.3.27	4 / 1	2022-05-01
1.3.26	4 / 1	2022-04-28
1.3.25	4 / 1	2022-04-28
1.3.24	4 / 1	2022-04-22
1.3.23	4 / 1	2022-04-21
1.3.22	4 / 1	2022-04-20
1.3.21	4 / 1	2022-04-13
1.3.20	4 / 1	2022-04-08
1.3.19	4 / 1	2022-04-08
1.3.18	3 / 1	2022-03-24
1.3.17	3 / 1	2022-03-21
1.3.16	3 / 1	2022-03-20
1.3.15	3 / 1	2022-03-16
1.3.14	3 / 1	2022-03-15
1.3.13	2 / 1	2022-02-27
1.3.12	2 / 1	2022-02-27
1.3.11	2 / 1	2022-02-21
1.3.10	2 / 1	2022-02-21
1.3.9	2 / 1	2022-02-18
1.3.8	2 / 1	2022-02-18
1.3.7	2 / 1	2022-02-17
1.3.6	2 / 1	2022-02-12
1.3.5	2 / 1	2022-02-11
1.3.4	2 / 1	2022-02-11
1.3.3	2 / 1	2022-02-10
1.3.2	2 / 1	2022-02-10
1.3.1	2 / 1	2022-02-10
1.3.0	2 / 1	2022-02-09
1.2.0	2 / 1	2022-02-07

v3.3.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.0

2 findings

HIGH Publisher changed: achingbrain → npm-service-account-libp2p (on 2022-12-19) provenance

This version was published by a different npm account than previous versions on 2022-12-19. This could indicate a legitimate maintainer transition or an account compromise.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.6

2 findings

HIGH Publisher changed: achingbrain → npm-service-account-libp2p (on 2022-12-16) provenance

This version was published by a different npm account than previous versions on 2022-12-16. This could indicate a legitimate maintainer transition or an account compromise.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.5

2 findings

HIGH Publisher changed: achingbrain → npm-service-account-libp2p (on 2022-12-14) provenance

This version was published by a different npm account than previous versions on 2022-12-14. This could indicate a legitimate maintainer transition or an account compromise.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.4

2 findings

HIGH Publisher changed: achingbrain → npm-service-account-libp2p (on 2022-11-05) provenance

This version was published by a different npm account than previous versions on 2022-11-05. This could indicate a legitimate maintainer transition or an account compromise.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.3.32

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.31

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.30

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.29

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.28

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.27

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.26

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.25

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.24

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.23

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.22

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.21

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.20

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.19

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.18

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.17

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.16

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.15

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.14

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.13

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.12

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.10

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.9

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.8

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.7

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.6

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.