
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@peac/kernel
Advanced tools
PEAC protocol kernel: normative constants, error codes, registries, and core types. Zero runtime dependencies.
pnpm add @peac/kernel
@peac/kernel is Layer 0 of the PEAC protocol stack. It provides the type definitions, constants, and error codes that all other packages depend on. It has zero runtime dependencies and no I/O.
import type { PeacEvidenceCarrier, CarrierAdapter, CarrierMeta } from '@peac/kernel';
import { WIRE_TYPE, HEADERS, ALGORITHMS } from '@peac/kernel';
console.log(WIRE_TYPE); // 'peac-receipt/0.1'
console.log(HEADERS.receipt); // 'PEAC-Receipt'
import { ERRORS } from '@peac/kernel';
const err = ERRORS.E_JWKS_FETCH_FAILED;
console.log(err.code); // 'E_JWKS_FETCH_FAILED'
console.log(err.retryable); // true
console.log(err.next_action); // 'retry_after_delay'
import { PAYMENT_RAILS, CHALLENGE_TYPES, PURPOSE_TOKENS } from '@peac/kernel';
@peac/schema (Layer 1): Zod validators built on kernel types@peac/crypto (Layer 2): Signing/verification using kernel constants@peac/protocol (Layer 3): High-level API using kernel error codes@peac/mappings-* and @peac/adapter-* packages (Layer 4)If you are building an AI agent or MCP server that needs evidence receipts:
@peac/mcp-server for a ready-to-use MCP tool server@peac/protocol for programmatic receipt issuance and verificationApache-2.0
PEAC Protocol is an open source project stewarded by Originary and community contributors.
FAQs
PEAC protocol kernel - normative constants, errors, and registries
The npm package @peac/kernel receives a total of 149 weekly downloads. As such, @peac/kernel popularity was classified as not popular.
We found that @peac/kernel demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.