Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@digitalbazaar/zcapld
Advanced tools
Javascript reference implementation for Authorization Capabilities for Linked Data.
TODO
TBD
To install from NPM:
npm install @digitalbazaar/zcapld
To install locally (for development):
git clone https://github.com/digitalbazaar/zcapld.git
cd zcapld
npm install
TBD
See the contribute file!
PRs accepted.
If editing the Readme, please conform to the standard-readme specification.
Commercial support for this library is available upon request from Digital Bazaar: support@digitalbazaar.com
New BSD License (3-clause) © Digital Bazaar
5.0.0 - 2021-07-02
ZCAP_CONTEXT
in constants
as a convenience.documentLoader
to expose a convenience document loader that will load
ZCAP_CONTEXT
.extendDocumentLoader
for adding a custom document loader that extend
documentLoader
to load other documents.invocationTarget
to be set in order for match()
to find proofs based on expectedTarget
.
This helps ensure that the proof creator's intended invocationTarget
is
declared (important for systems that support RESTful attenuation) and it
enables more efficient proof verification when documents include multiple
capability invocation proofs that may have different invocation targets.expectedAction
is checked when looking for a matching proof,
not capabilityAction
.FAQs
Linked Data Capabilities reference implementation.
We found that @digitalbazaar/zcapld demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.