
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@peac/audit
Advanced tools
Audit logging, case bundle generation, and commerce evidence bundling for PEAC protocol disputes and observability.
pnpm add @peac/audit
@peac/audit provides structured audit logging in JSONL format, case bundle generation for dispute resolution, and commerce evidence bundling for multi-protocol payment observations. It includes trace correlation via W3C Trace Context, dispute bundle creation with cryptographic integrity verification, and privacy-safe logging patterns.
import { createAuditEntry, formatJsonl } from '@peac/audit';
const entry = createAuditEntry({
event_type: 'receipt_issued',
actor: { type: 'system', id: 'peac-issuer' },
resource: { type: 'receipt', id: 'jti:rec_abc123' },
outcome: { success: true, result: 'issued' },
});
const jsonl = formatJsonl([entry]);
import { createDisputeBundle, verifyBundle } from '@peac/audit';
const bundle = await createDisputeBundle({
kind: 'dispute',
receipts: [{ jws: compactJws, ref: receiptRef }],
jwks: { keys: [publicJwk] },
});
const report = await verifyBundle({ bundle });
console.log(report.summary);
import { correlateByTrace, filterByTimeRange } from '@peac/audit';
const recent = filterByTimeRange(entries, {
start: '2026-03-01T00:00:00Z',
end: '2026-03-29T00:00:00Z',
});
const traces = correlateByTrace(recent);
for (const t of traces) {
console.log(`Trace ${t.trace_id}: ${t.entries.length} events`);
}
@peac/kernel (Layer 0): Error codes and type definitions@peac/schema (Layer 1): Receipt validation schemas@peac/crypto (Layer 2): Signature verification for dispute bundles@peac/protocol (Layer 3): Receipt issuance and verificationIf you are building an AI agent or MCP server that needs evidence receipts:
@peac/mcp-server for a ready-to-use MCP tool server@peac/protocol for programmatic receipt issuance and verificationApache-2.0
PEAC Protocol is an open source project stewarded by Originary and community contributors.
FAQs
Audit logging and case bundle generation for PEAC protocol disputes
The npm package @peac/audit receives a total of 79 weekly downloads. As such, @peac/audit popularity was classified as not popular.
We found that @peac/audit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.