Security News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
By Sarah Gooding - Oct 01, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@cedulon/cose
Advanced tools
@cedulon/cose
Deterministic CBOR and COSE_Sign1 (Ed25519). Cedulon receipts, manifests, checkpoints, and decision tokens share this encoder.
import { signCoseSign1, verifyCoseSign1, CTY_RECEIPT } from "@cedulon/cose";
const cose = signCoseSign1(payload, privateKeyPem, CTY_RECEIPT);
verifyCoseSign1(cose, publicKeyPem, CTY_RECEIPT);
Repository: https://github.com/dogrucanemek-alt/cedulon
FAQs
Deterministic CBOR and COSE_Sign1 (Ed25519) used by Cedulon.
The npm package @cedulon/cose receives a total of 1,478 weekly downloads. As such, @cedulon/cose popularity was classified as popular.
We found that @cedulon/cose demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 03 Sep 2026
Related posts
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
By Sarah Gooding - Oct 01, 2026
Security News
New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.
By Sarah Gooding - Sep 30, 2026