@allbridge/bridge-core-sdk 3.23.0-beta.2 → 3.23.0-beta.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -294,3 +294,10 @@ const transferTimeMs = sdk.getAverageTransferTime(
294
294
  Messenger.ALLBRIDGE
295
295
  );
296
296
  ```
297
+
298
+ ### Known Audit Warning
299
+
300
+ Due to a dependency on `@solana/web3.js`, the package `bigint-buffer@1.1.5` is present in the dependency tree and marked as vulnerable.
301
+ This vulnerability is not exploitable in the context of this SDK, and no sensitive or user-facing code depends on `bigint-buffer` directly.
302
+
303
+ We are monitoring upstream packages for an official resolution.