Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
@notabene/pii-sdk
Advanced tools
Encryption / Decryption Library for Personal Identifiable Information
This library is hosted on GitLab package repository (instead of NPM). To install packages from there add the following to an .npmrc
file:
//gitlab.com/api/v4/packages/npm/:_authToken=${GITLAB_AUTH_TOKEN}
@notabene:registry=https://gitlab.com/api/v4/packages/npm/
yarn
yarn add @notabene/pii-sdk
npm
npm install @notabene/pii-sdk
Parameter | Description |
---|---|
INFURA_PROJECT_ID | Infura (https://infura.io) for resolving did:ethr DIDs |
KMS_SECRET_KEY | Secret box key to encrypt / decrypt private key |
NOTABENE_URL | Notabene directory URL to get VASP DIDs and keys |
NOTABENE_PII_URL | Default Notabene PII escrow service to share encrypted audited data |
import NotabeneKeyToolset from '@notabene/pii-sdk';
//Init Notabene Key Toolset
const nbKeyToolSet = new NotabeneKeyToolset({
INFURA_PROJECT_ID: '(infura project id)',
KMS_SECRET_KEY: '(secret box key)',
NOTABENE_URL: 'https://api.notabene.id',
NOTABENE_PII_URL: 'https://pii.notabene.id',
});
//Create key
const myKey = await nbKeyToolSet.createKey();
//Encrypt to VASP with DID did:ethr:0x1234
const encryptedPII = await toolset.encryptPII({
senderKeyJson: myKey,
recipientDIDs: ['did:ethr:0x1235'],
recipientKeys: [],
body: piiData,
});
//Encrypt to VASP with key did:key:z6MkhaX...
const encryptedPII = await toolset.encryptPII({
senderKeyJson: myKey,
recipientDIDs: [],
recipientKeys: ['did:key:z6MkhaX...'],
body: piiData,
});
//Decrypt PII for VASP
const decryptedPII = await toolset.decryptPII(myKey, encryptedPII);
Contributions are welcome!
Want to file a bug, request a feature or contribute some code?
yarn
- To install dependenciesyarn dlx @yarnpkg/sdks vscode
- Sets up VSCode to support ESLint/Prettier/TypeScript using Yarn 3 (make sure to install ZipFS
vscode extension too)yarn watch
- Hot reloading for developmentyarn build
- Compile the library to the dist/
folderyarn lint
- Lints the library using ESLint/Prettieryarn test
- Run Jest to test the libraryyarn release
- Release the project using semantic-release (only run in CI)MIT © Notabene
FAQs
SDK to manage PII encryption
The npm package @notabene/pii-sdk receives a total of 27,828 weekly downloads. As such, @notabene/pii-sdk popularity was classified as popular.
We found that @notabene/pii-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.