Package

@swapper-finance/deposit-sdk

npm:@swapper-finance/deposit-sdk · v0.5.7 · sha256:790af0c96491 · as of 2026-11-03

Does it take your key?: It asks for a private key or seed phrase in its setup.; The project says so — README, config, env list or tool description.
Does your key leave?: Not yet run — we have not run this version with planted test keys.; No evidence line on file for this question yet.
Can it move funds on its own?: Unknown — we could not read what it exposes.; The project says so — README, config, env list or tool description.
What changed?: No change in key, host or fund behaviour since 0.5.5.; Our static read of the published artifact found it.

Hosts contacted

Host	When	Role	Evidence
deposit.swapper.finance	code	vendor	traced
swapper.finance	code	vendor	traced

Evidence (4 lines)

tracedT-hosts2026-11-03
deposit.swapper.finance appears in shipped code (vendor).
dist/swapper-sdk.iife.js
tracedT-hosts2026-11-03
swapper.finance appears in shipped code (vendor).
dist/api/client.js
declaredD-env-key2026-11-03
Setup names PRIVATE_KEY as something to provide.
@swapper-finance/deposit-sdk@0.5.7/README.md
declaredD-doc-funds2026-11-03
The project's own text says it carries out transactions: "ready-to-sign transaction, track the transfer until it lands, and create"
@swapper-finance/deposit-sdk@0.5.7/README.md (line 870)

The observed lane has not run on this version: not yet run on this version
Traced analysis follows flows inside one module and one hop across a relative import; a longer chain is not followed.
The observed lane has not run on this version.
No tool inventory was available, so fund actions were not read.

A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".

sato.custody/v1 · custody-3

Maintain this project? Respond to this reading

Loading sign-in…