Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
@aries-framework/bbs-signatures
Advanced tools
Aries Framework JavaScript BBS Module provides an optional addon to Aries Framework JavaScript to use BBS signatures in W3C VC exchange.
yarn add @aries-framework/bbs-signatures
When using AFJ inside the React Native environment, temporarily, a dependency for creating keys, signing and verifying, with bbs keys must be swapped. Inside your package.json
the following must be added. This is only needed for React Native environments
+ "resolutions": {
+ "@mattrglobal/bbs-signatures": "@animo-id/react-native-bbs-signatures@^0.1.0",
+ },
"dependencies": {
...
+ "@animo-id/react-native-bbs-signatures": "^0.1.0",
}
+ "overrides": {
+ "@mattrglobal/bbs-signatures": "@animo-id/react-native-bbs-signatures@^0.1.0",
+ },
"dependencies": {
...
+ "@animo-id/react-native-bbs-signatures": "^0.1.0",
}
The resolution field says that any instance of @mattrglobal/bbs-signatures
in any child dependency must be swapped with @animo-id/react-native-bbs-signatures
.
The added dependency is required for autolinking and should be the same as the one used in the resolution.
React Native Bbs Signature has some quirks with setting it up correctly. If any errors occur while using this library, please refer to their README for the installation guide.
node-bbs-signatures
Right now some platforms will see an "error" when installing the @aries-framework/bbs-signatures
package. This is because the BBS signatures library that we use under the hood is built for Linux x86 and MacOS x86 (and not Windows and MacOS arm). This means that it will show that it could not download the binary. This is not an error for developers, the library that fails is node-bbs-signatures
and is an optional dependency for performance improvements. It will fallback to a (slower) wasm build.
FAQs
<h1 align="c
We found that @aries-framework/bbs-signatures demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.