
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@algovoi/keystone-vc
Advanced tools
Emit an AlgoVoi keystone decision as a W3C Verifiable Credential (DM 2.0) with recomputable executionRef (Apache-2.0). Byte-identical to algovoi-keystone-vc (PyPI).
Emit an AlgoVoi keystone decision as a W3C Verifiable Credential
(Data Model 2.0). The credential uses our own KeystoneExecutionCredential type and @context, so
it needs no registration. The content-addressed executionRef is the credentialSubject.id; a
consumer recomputes it from the subject with only JCS (RFC 8785) + SHA-256, so the credential is
content-bound before any signature suite is applied. Signing (a DataIntegrityProof such as
eddsa-jcs-2022) is the issuer's step.
from algovoi_keystone_vc import to_verifiable_credential, verify_vc_execution_ref
vc = to_verifiable_credential(decision_ref=dr, action_type="payment", scope="payments/transfer",
outcome="COMMITTED", executed_at_ms=1716460800000,
issuer="did:web:api.algovoi.co.uk")
assert verify_vc_execution_ref(vc) # recompute from credentialSubject, offline
Apache-2.0.
FAQs
Emit an AlgoVoi keystone decision as a W3C Verifiable Credential (DM 2.0) with recomputable executionRef (Apache-2.0). Byte-identical to algovoi-keystone-vc (PyPI).
We found that @algovoi/keystone-vc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.