
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@decionis/presence-types
Advanced tools
Public Presence wire types and Zod schemas for sessions, decisions, and dossiers.
Presence SDK — verify human presence before consequential actions execute.
Applications send intent and context. Presence verifies the person. Decionis decides whether execution proceeds.
Public TypeScript types and Zod schemas for the Presence API wire contract: sessions,
decisions, Verdicts, enforcement, intent envelopes, and Presence Records (wire name:
dossier).
npm install @decionis/presence-types
import {
DecideRequestSchema,
DecideResponseSchema,
ActionContextSchema,
VerdictSchema, // "AUTHORIZED" | "RESTRAIN" | "ESCALATE" | "BLOCKED"
EnforcementModeSchema, // "SHADOW" | "RESTRAIN_ONLY" | "ENFORCE_HIGH_STAKES" | "ENFORCE"
DecisionDossierSchema,
VerificationBundleSchema,
IntentEnvelopeSchema,
VerificationRequestSchema,
} from "@decionis/presence-types";
Every schema exports its inferred type (DecideRequest, DecideResponse, Verdict, …).
Wire fields are snake_case to match the Presence protocol. Requires Node.js 22.14 or
later; ESM only.
This is a support package. Start with the SDKs that consume it:
@decionis/presence-node — server-side Presence Checks.@decionis/presence-web — the subject-side browser ceremony.The canonical cross-language contract is
openapi/presence-v1.yaml. Tenant credentials must
remain on a trusted server.
Apache-2.0. Use of the hosted Presence service is governed separately.
FAQs
Public Presence wire types and Zod schemas for sessions, decisions, and dossiers.
The npm package @decionis/presence-types receives a total of 32 weekly downloads. As such, @decionis/presence-types popularity was classified as not popular.
We found that @decionis/presence-types demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.