
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@iov/keycontrol
Advanced tools
Keycontrol manages all private keys and keeps them safe.

Please stick to using the
public API
even if you are importing from JavaScript, where private is not enforced.
Please see the following documents for how to get started using the
@iov/keycontrol classes:
https://iov-one.github.io/iov-core-docs/latest/iov-keycontrol/
As you see above, everything goes through the UserProfile, which is the main entry point into this package.
The main wallet types you can add are
Ed25519HdWallet and Secp256k1HdWallet use SLIP-0010 HD key derivation. The class HdPaths can be used to generate derivation paths.
| Coin | Derivation path for account index a = 0,1,… | Code |
|---|---|---|
| IOV | m/44'/234'/a' | HdPaths.iov(a) |
| Ethereum | m/44'/60'/0'/0/a | HdPaths.ethereum(a) |
| Lisk | m/44'/134'/a' | HdPaths.bip44(134, a) |
| RISE | m/44'/1120'/a' | HdPaths.bip44(1120, a) |
| Stellar | m/44'/148'/a' | HdPaths.bip44(148, a) |
This package is part of the IOV-Core repository, licensed under the Apache License 2.0 (see NOTICE and LICENSE).
FAQs
Keyrings and Keycontroller for safe cryptography
The npm package @iov/keycontrol receives a total of 230 weekly downloads. As such, @iov/keycontrol popularity was classified as not popular.
We found that @iov/keycontrol demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.