DevX Initiative
In review: This tooling data is still being verified and may change.
← Dijkstra readiness

Vacuumlabs · npm

cardano-hw-cli

Dijkstra readiness: gap (see below). Dependency evidence does not establish compatibility.

Dijkstra hardfork

All tools →

Breaks after HF

Blocked bycardano-serialization-lib-cslcardano-hw-interop-libledgerjs-hw-app-cardano

Exposure dependency · inherited readiness gap · scanned at 31aa179c8b

Changed surfaces touched by shipped code (8)
  • block-encodinggap · via cardano-serialization-lib-csl
  • cardano-cliupstream · via service:cardano-cli
  • era-identityno-evidence · via cardano-serialization-lib-csl
  • plutus-languagegap · via cardano-serialization-lib-csl, marker:plutus-language-enum
  • protocol-parametersgap · via cardano-serialization-lib-csl, marker:cost-models-or-parameters
  • stake-pool-registrationgap · via cardano-serialization-lib-csl, marker:pool-registration
  • transaction-encodinggap · via cardano-hw-interop-lib, cardano-serialization-lib-csl, ledgerjs-hw-app-cardano, marker:legacy-stake-certificate
  • transaction-rulesno-evidence · via cardano-serialization-lib-csl, ledgerjs-hw-app-cardano

Blocked by

  • upstream fixcardano-serialization-lib-cslplutus-languageprotocol-parametersstake-pool-registrationtransaction-encoding
  • upstream fixcardano-hw-interop-libtransaction-encoding
  • upstream fixledgerjs-hw-app-cardanotransaction-encoding

Waiting on

Lead decisions

  • confirmed· cardano-hw-interop-libtransaction-encoding

    Parses transaction files with the interop library, which rejects bodies with keys beyond 22.

  • confirmed· cardano-serialization-lib-cslplutus-language

    Witness handling decodes witness sets with CSL and validates Plutus witnesses and cost models of user-supplied transactions.

  • confirmed· cardano-serialization-lib-cslprotocol-parametersstake-pool-registrationtransaction-encoding

    Transaction files supplied by the user are decoded with CSL, whose body decoder rejects keys beyond 22, parameter updates beyond key 33 and pool certificates with a BLS key (pool registration signing included).

  • confirmed· ledgerjs-hw-app-cardanotransaction-encoding

    Signs transactions built elsewhere (dApp requests or transaction files) on a Ledger; the Ledger transaction model ends at key 22.

    • package.json:44"@cardano-foundation/ledgerjs-hw-app-cardano": "8.0.0-beta",

  • not-reached· cardano-serialization-lib-cslblock-encoding

    CSL decodes transactions here, not blocks.

Inspect source release

Artifact mapping

partial

Native resolution

partial

Integration review

unresolved

Capability review

unresolved

Discovered source release
v1.19.1
Source repository
vacuumlabs/cardano-hw-cli
Last successful discovery
2026-10-17T16:53:26.540Z
Last attempt
2026-10-17T16:53:24.579Z

Dependency profiles

Native profile coverage
partial
Evidence origin
source-reconstruction
Command and toolchain
Read committed yarn.lock, package manifests and repository configuration at 8977cc05622b5d635d406065d7f55541f2bb4159
Yarn classic lock; producing Yarn version unknown; parser @yarnpkg/lockfile 1.1.0
Pinned source
8977cc05622b5d635d406065d7f55541f2bb4159

Expand packages to follow dependencies. Shared artifacts can appear along several paths; cycles stop at the repeated occurrence. Complete native resolution does not mean complete tool coverage.

Chain-facing capabilities

Findings describe behavior in a specific release and configuration. Suggestions need verification; historical findings do not establish behavior in the current source. None establishes hardfork compatibility.

No capability findings have been returned. Behavior remains unresolved; an empty list does not mean this tool has no chain-facing capabilities.

Unresolved frontiers and next actions

capability

Chain-facing capabilities have not been reviewed.

Next: Review production entry points and integration behavior.

artifact

Source tag and manifest identify 1.19.1, but package.json embeds a different commit value. Published binaries, Node/pkg output, native USB/HID assets and serialization WASM correspondence are not verified.

Next: Verify release attestations/checksums and built package contents against the selected source.

integration

Runtime, bundled, and service dependencies have not been reviewed.

Next: Export a discovery review packet.

resolution

Yarn lock selections are not an installed dependency inventory. Hoisting, virtual peer contexts, platform/optional pruning, native bundles and published artifact correspondence remain unverified; Classic locks also omit transitive peer declarations.

Next: Recollect a complete native build plan for this profile.

profile:cardano-hw-cli:fca24b891602ed94eae6a326

integration

The selected Classic Yarn closure includes hardware-wallet clients, but scripts/fix-trezor-firmware.js patches installed Trezor files. Ledger/Trezor/Keystone firmware, device transports, transaction restrictions and cardano-cli interoperability have not been tested or reviewed.

Next: Inspect postinstall and bundled/native artifacts, then review the selected signing workflow and device/firmware configuration.

artifact

Source release identified; published package/binary correspondence and supported profiles need verification.

Next: Confirm distribution artifacts and production configuration with release evidence.

Discovered manifests (2)
Evidence index (18)