
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@canton-network/core-signing-store-wxt
Advanced tools
A WxtStore is a browser-extension implementation of the SigningDriverStore interface from @canton-network/core-signing-lib backed by @wxt-dev/storage.
This store persists signing keys, signing transactions, and per driver configuration in the extension's local storage area.
The extension is single-user, so all data for a given record type is kept in a single flat array under one storage key rather than one storage imem per record plus separate lookup indexes.
| Data | Storage key | Shape |
|---|---|---|
| Signing Keys | local:signingKeys | SigningKeyRecord[] |
| Signing Transactions | local:signingTransactions | SigningTransactionRecord[] |
| Driver config | local: signingDriverConfigItem | SigningDriverConfigRecord |
import { WxtStore } from '@canton-network/core-signing-store-wxt'
const userId = 'myUser'
const store = new WxtStore(userId)
await store.setSigningKey(userId, {
id: 'key1',
name: 'pkey1',
publicKey: '...',
privateKey: '...',
createdAt: new Date(),
updatedAt: new Date(),
})
const key = await store.getSigningKeyByName(userId, 'pkey1')
const allKeys = await store.listSigningKeys(userId)
FAQs
WXT implementation of the Store API
We found that @canton-network/core-signing-store-wxt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.