Optional peerDependencies node-notifier from node_modules/jest has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
In review: This tooling data is still being verified and may change.
Emurgo · npm
Yoroi
Dijkstra readiness: gap (see below). Dependency evidence does not establish compatibility.
Dijkstra hardfork
All tools →Breaks after HF
Exposure dependency · inherited readiness gap · scanned at 5f6fb8348d
Changed surfaces touched by shipped code (8)
- block-encodinggap · via cardano-serialization-lib-csl, marker:raw-cbor-codec
- era-identitygap · via cardano-serialization-lib-csl, koios
- plutus-languagegap · via cardano-serialization-lib-csl, marker:plutus-language-enum
- plutus-script-contextunassessed · via marker:script-context
- protocol-parametersgap · via cardano-serialization-lib-csl, marker:cost-models-or-parameters, koios
- stake-pool-registrationgap · via cardano-serialization-lib-csl, marker:pool-registration
- transaction-encodinggap · via cardano-serialization-lib-csl, ledgerjs-hw-app-cardano, marker:legacy-stake-certificate, marker:raw-cbor-codec, koios
- transaction-rulesno-evidence · via cardano-serialization-lib-csl, ledgerjs-hw-app-cardano
Blocked by
- upstream fixcardano-serialization-lib-cslplutus-languageprotocol-parametersstake-pool-registrationtransaction-encoding
- upstream fixkoiosprotocol-parameters
- upstream fixledgerjs-hw-app-cardanotransaction-encoding
Waiting on
- cardano-serialization-lib-cslno-evidence, no verdictera-identitytransaction-rules
- koiosno-evidence, no verdicttransaction-encoding
- ledgerjs-hw-app-cardanono-evidence, no verdicttransaction-rules
Lead decisions
confirmed· cardano-serialization-lib-cslplutus-language
Transaction review decodes dApp-supplied transactions with CSL before signing.
- mobile/src/features/ReviewTx/common/hooks/useTxBody.tsx:21
const tx = csl.Transaction.fromHex(cbor)
- mobile/src/features/ReviewTx/common/hooks/useTxBody.tsx:21
confirmed· cardano-serialization-lib-cslprotocol-parametersstake-pool-registrationtransaction-encoding
Transaction review decodes dApp-supplied transactions with CSL, whose body decoder rejects keys beyond 22, parameter updates beyond key 33 and pool certificates with a BLS key.
- mobile/src/features/ReviewTx/common/hooks/useTxBody.tsx:21
const tx = csl.Transaction.fromHex(cbor)
- mobile/src/features/ReviewTx/common/hooks/useTxBody.tsx:21
confirmed· koiosprotocol-parameters
The airdrop escrow fetches the PlutusV3 cost model from Koios /epoch_params.
- mobile/src/features/Airdrop/common/escrow/costModels.ts:14
'https://api.koios.rest/api/v1/epoch_params?limit=1',
- mobile/src/features/Airdrop/common/escrow/costModels.ts:14
confirmed· ledgerjs-hw-app-cardanotransaction-encoding
Signs transactions built elsewhere (dApp requests or transaction files) on a Ledger for CIP-30 dApp requests.
- mobile/packages/cardano-wallet/cip30/cip30-ledger.ts:13
} from '@cardano-foundation/ledgerjs-hw-app-cardano'
- mobile/packages/cardano-wallet/cip30/cip30-ledger.ts:13
not-reached· cardano-serialization-lib-cslblock-encoding
CSL decodes transactions here, not blocks.
- mobile/src/features/ReviewTx/common/hooks/useTxBody.tsx:21
const tx = csl.Transaction.fromHex(cbor)
- mobile/src/features/ReviewTx/common/hooks/useTxBody.tsx:21
not-reached· koiosera-identity
Yoroi reads no Koios era names.
- mobile/src/features/Airdrop/common/escrow/costModels.ts:45
// Fallback PlutusV3 cost model (mainnet, as of Conway era)
- mobile/src/features/Airdrop/common/escrow/costModels.ts:45
Artifact mapping
partial
Native resolution
partial
Integration review
unresolved
Capability review
unresolved
- Discovered source release
- v7.0.5
- Source repository
- Emurgo/yoroi
- Last successful discovery
- 2026-10-17T16:51:13.574Z
- Last attempt
- 2026-10-17T16:51:11.052Z
Dependency profiles
- Native profile coverage
- partial
- Evidence origin
- source-reconstruction
- Command and toolchain
- Read committed mobile/package-lock.json at d8e3d3f93fb772f0b6bd2296e45bfac7da4fb9d6
npm lockfile format 3; producing npm version unknown - Pinned source
- d8e3d3f93fb772f0b6bd2296e45bfac7da4fb9d6
Expand packages to follow dependencies. Shared artifacts can appear along several paths; cycles stop at the repeated occurrence. Complete native resolution does not mean complete tool coverage.
Chain-facing capabilities
Findings describe behavior in a specific release and configuration. Suggestions need verification; historical findings do not establish behavior in the current source. None establishes hardfork compatibility.
No capability findings have been returned. Behavior remains unresolved; an empty list does not mean this tool has no chain-facing capabilities.
Unresolved frontiers and next actions
Chain-facing capabilities have not been reviewed.
Next: Review production entry points and integration behavior.
Optional peerDependencies react-native-localize from node_modules/posthog-react-native has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies utf-8-validate from node_modules/react-devtools-core/node_modules/ws has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies vitest from node_modules/@testing-library/jest-dom has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Runtime, bundled, and service dependencies have not been reviewed.
Next: Export a discovery review packet.
Optional peerDependencies encoding from node_modules/node-fetch has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies vue from node_modules/@formatjs/cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @expo/dom-webview from node_modules/expo has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @glimmer/reference from node_modules/@formatjs/cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies posthog-react-native-session-replay from node_modules/posthog-react-native has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies react-native-windows from node_modules/lottie-react-native has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Lockfile graph is an all-platform selection, not an installed or release-build dependency inventory. Platform/optional pruning and shipped artifact correspondence remain unverified.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies content-tag from node_modules/@formatjs/cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies node-notifier from node_modules/jest-cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies canvas from node_modules/jest-environment-jsdom has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies bufferutil from node_modules/react-devtools-core/node_modules/ws has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies bufferutil from node_modules/metro/node_modules/ws has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @vue/compiler-core from node_modules/@formatjs/cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies node-notifier from node_modules/@jest/core has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Yoroi tag v7.0.5 and mobile manifest 7.0.5 contain lock root yoroi-v2 7.0.4; dependency declarations agree. The selected mobile npm graph is not a verified inventory of a shipped 7.0.5 app.
Next: Verify the release build provenance and mobile lock correspondence without replacing the captured lock version.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @types/react-dom from node_modules/@testing-library/react has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies babel-plugin-macros from node_modules/dedent has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Only the mobile JavaScript root is selected. Expo prebuild and production/preview/development configuration, native Android/iOS output, postinstall patches, hardware devices and provider deployments remain outside this lock profile.
Next: Capture the selected production Expo/native build output and configuration, then manually review wallet signing, sending and service boundaries.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @glimmer/env from node_modules/@formatjs/cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @lottiefiles/dotlottie-react from node_modules/lottie-react-native has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies utf-8-validate from node_modules/metro/node_modules/ws has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @glimmer/syntax from node_modules/@formatjs/cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies svelte from node_modules/@trivago/prettier-plugin-sort-imports has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies ts-node from node_modules/jest-config has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies graphql from node_modules/@0no-co/graphql.web has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies babel-plugin-react-compiler from node_modules/babel-preset-expo has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @expo/metro-runtime from node_modules/expo has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies bufferutil from node_modules/ws has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @glimmer/validator from node_modules/@formatjs/cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies canvas from node_modules/jsdom has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies prettier-plugin-svelte from node_modules/@trivago/prettier-plugin-sort-imports has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies react-native-navigation from node_modules/posthog-react-native has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @vue/compiler-sfc from node_modules/@trivago/prettier-plugin-sort-imports has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Source release identified; published package/binary correspondence and supported profiles need verification.
Next: Confirm distribution artifacts and production configuration with release evidence.
Optional peerDependencies react-native-b4a from node_modules/b4a has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies utf-8-validate from node_modules/ws has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @types/bun from node_modules/@testing-library/jest-dom has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies ember-template-recast from node_modules/@formatjs/cli has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies @react-native-community/cli from node_modules/@react-native/community-cli-plugin has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Optional peerDependencies node-notifier from node_modules/@jest/reporters has no locked occurrence.
Next: Recollect a complete native build plan for this profile.
profile:yoroi:67d8aeed89b15a8b48d24369
Discovered manifests (49)
- mobile/package-lock.json
- mobile/package.json
- package-lock.json
- scripts/packages/api/package-lock.json
- scripts/packages/api/package.json
- scripts/packages/blockchains/package-lock.json
- scripts/packages/blockchains/package.json
- scripts/packages/cardano-wallet/package-lock.json
- scripts/packages/cardano-wallet/package.json
- scripts/packages/claim/package-lock.json
- scripts/packages/claim/package.json
- scripts/packages/common/package-lock.json
- scripts/packages/common/package.json
- scripts/packages/dapp-connector/package-lock.json
- scripts/packages/dapp-connector/package.json
- scripts/packages/exchange/package-lock.json
- scripts/packages/exchange/package.json
- scripts/packages/explorers/package-lock.json
- scripts/packages/explorers/package.json
- scripts/packages/identicon/package-lock.json
- scripts/packages/identicon/package.json
- scripts/packages/links/package-lock.json
- scripts/packages/links/package.json
- scripts/packages/logger/package-lock.json
- scripts/packages/logger/package.json
- scripts/packages/notifications/package-lock.json
- scripts/packages/notifications/package.json
- scripts/packages/p2p-communication/package-lock.json
- scripts/packages/p2p-communication/package.json
- scripts/packages/portfolio/package-lock.json
- scripts/packages/portfolio/package.json
- scripts/packages/resolver/package-lock.json
- scripts/packages/resolver/package.json
- scripts/packages/setup-wallet/package-lock.json
- scripts/packages/setup-wallet/package.json
- scripts/packages/staking/package-lock.json
- scripts/packages/staking/package.json
- scripts/packages/swap/package-lock.json
- scripts/packages/swap/package.json
- scripts/packages/theme/package-lock.json
- scripts/packages/theme/package.json
- scripts/packages/transfer/package-lock.json
- scripts/packages/transfer/package.json
- scripts/packages/tx/package-lock.json
- scripts/packages/tx/package.json
- scripts/packages/types/package-lock.json
- scripts/packages/types/package.json
- scripts/packages/wallet-manager/package-lock.json
- scripts/packages/wallet-manager/package.json
Evidence index (11)
- Pinned repository tree for manifest and integration discovery
evidence:035dca327ac344f36a16b11bb9266aa7d0171ad88dfd48efb4ad72fbbb85d4baRetained at data/readiness/evidence/035dca327ac344f36a16b11bb9266aa7d0171ad88dfd48efb4ad72fbbb85d4ba.json.gz - Source yoroi/mobile/package-lock.json
evidence:22a759e4ed25ca197ff504dcd2a26e2f80b932a7b051db62006e182f982fac81Retained at data/readiness/evidence/22a759e4ed25ca197ff504dcd2a26e2f80b932a7b051db62006e182f982fac81.json.gz - Source yoroi/README.md
evidence:2bd4b2f41d63ce4ae05dfbbbc14e1e9f5043e78d6791cbb03855e7ca301e8d01Retained at data/readiness/evidence/2bd4b2f41d63ce4ae05dfbbbc14e1e9f5043e78d6791cbb03855e7ca301e8d01.json.gz - npm-lock for yoroi v7.0.5
evidence:43bb1a850548d244bec5f6c9b5970e76bc82d89431ae8a8db6c87a46265519bbRetained at data/readiness/evidence/43bb1a850548d244bec5f6c9b5970e76bc82d89431ae8a8db6c87a46265519bb.json.gz - Collection request for yoroi
evidence:75ba0b080692863571e3347ecdd46f03f0d4bcc06e89c79b470953c15c731757Retained at data/readiness/evidence/75ba0b080692863571e3347ecdd46f03f0d4bcc06e89c79b470953c15c731757.json.gz - Source yoroi/mobile/README.md
evidence:8ab445759d0146d914927228846a3bd862b175c2a42f85093366857748b0d87cRetained at data/readiness/evidence/8ab445759d0146d914927228846a3bd862b175c2a42f85093366857748b0d87c.json.gz - Source yoroi/mobile/package.json
evidence:ad313588db9bb497b54081bb3cb150971817e0de2f69cfc96a4d9625693796cfRetained at data/readiness/evidence/ad313588db9bb497b54081bb3cb150971817e0de2f69cfc96a4d9625693796cf.json.gz - Release selection and immutable source identity
evidence:b0893e65b080568b38a232b36d5339a4b2c1544a8b4291a5e1c4aae846595355Retained at data/readiness/evidence/b0893e65b080568b38a232b36d5339a4b2c1544a8b4291a5e1c4aae846595355.json.gz - Pinned wallet/contract workflow scope for yoroi
evidence:bcc2082d96df283edfd12f9a2f5287af9568ffd1aa62936c45285cfb693418b4Retained at data/readiness/evidence/bcc2082d96df283edfd12f9a2f5287af9568ffd1aa62936c45285cfb693418b4.json.gz - Source yoroi/mobile/app.config.js
evidence:cdf0944de5f3fef53ab425a528fa2817f10c48b3a5af3e6a80415b24108340ebRetained at data/readiness/evidence/cdf0944de5f3fef53ab425a528fa2817f10c48b3a5af3e6a80415b24108340eb.json.gz - Native collection profile and command
evidence:f2868d468641175029d613645b16748155878a18f02cb4a50210d7a74ca05b7dRetained at data/readiness/evidence/f2868d468641175029d613645b16748155878a18f02cb4a50210d7a74ca05b7d.json.gz