
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@forestrie/merklelog
Advanced tools
MMR (merkle mountain range) proofs and massif storage format for Forestrie transparency logs
TypeScript implementation of the MMR (Merkle Mountain Range) merklelog format.
This package provides TypeScript implementations of the algorithms and data structures defined by the go-merklelog project.
The package is organized into three main modules:
pnpm add @forestrie/merklelog
import { Uint64 } from "@forestrie/merklelog";
const a = new Uint64(42);
const b = new Uint64(10);
const sum = a.add(b);
console.log(sum.toBigInt()); // 52n
import { Massif } from "@forestrie/merklelog";
const buffer = new Uint8Array(/* massif blob data */);
const massif = new Massif(buffer);
// Read fields dynamically
const lastID = massif.lastID;
const massifIndex = massif.massifIndex;
// Get complete start information
const start = massif.getStart();
// Access field by index
const field = massif.fieldref(0); // Returns 32-byte field at index 0
import { bagPeaks, verifyInclusion, Hasher } from "@forestrie/merklelog";
// Bag peaks to compute root (hasher.digest() is async)
const root = await bagPeaks(hasher, peakHashes);
// Verify inclusion proof
const isValid = await verifyInclusion(hasher, leafHash, proof, root);
This package follows the terminology defined in the term cheatsheet:
See LICENSE file in the repository.
FAQs
MMR (merkle mountain range) proofs and massif storage format for Forestrie transparency logs
The npm package @forestrie/merklelog receives a total of 437 weekly downloads. As such, @forestrie/merklelog popularity was classified as not popular.
We found that @forestrie/merklelog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.