refactor: bump and test fix

[Overtorment]

Note

Adds detectOurUtxos and expanded seedToCode outputs, makes tweak computation throw when no pubkeys found, pins dependencies, and updates CI install step.

• Core:
  • Add SilentPayment.detectOurUtxos(tx, seed, tweakHex) to identify spendable taproot UTXOs.
  • Enhance seedToCode(...) to return address, Bscan, bscan, Bspend, bspend.
  • Change computeTweakForTx(...) to throw "No pubkeys found in transaction inputs" when none detected.
• Tests:
  • Add cases for missing prevout script (error), seedToCode fields, and detectOurUtxos detection; keep existing vector checks.
• Tooling/Deps:
  • Bump version to 2.2.0; pin [email protected], [email protected], [email protected], [email protected], [email protected].
  • Remove package-lock.json.
  • CI: switch install to npm i (remove npm cache setting).

^{Written by Cursor Bugbot for commit 682faa6. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​tsconfig/​recommended@​1.0.2 ⏵ 1.0.10
	@​types/​create-hash@​1.2.2 ⏵ 1.2.6	-1		+18
	vitest@​3.0.8 ⏵ 3.2.4				+1
	ecpair@​3.0.0-rc.0 ⏵ 3.0.0	+1		+2	+1
	bip32@​5.0.0-rc.0 ⏵ 5.0.0	+1		+1
	bitcoinjs-lib@​7.0.0-rc.0 ⏵ 7.0.0	+1		+1
	typescript@​5.1.6 ⏵ 5.9.3

View full report

[cursor]

Bug: Reproducibility Issues After Removing package-lock.json

Deleting the package-lock.json file removes the guarantee of reproducible dependency installations. This also led to changing the CI workflow from npm ci to npm i, which may result in inconsistent builds across different environments.