🚀 Socket Launch Week Day 5:Introducing Repository Access Permissions and Custom Roles.Learn more
Sign In

@sovrahq/holder-core

Package Overview
Dependencies
Maintainers
2
Versions
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@sovrahq/holder-core

Platform-agnostic core for a Sovra credential holder/wallet: SD-JWT VC handling, OpenID4VCI/VP protocol flows, credential storage, and P-256/EIP-712 crypto utilities.

latest
Source
npmnpm
Version
0.1.0
Version published
Weekly downloads
71
Maintainers
2
Weekly downloads
 
Created
Source

@sovrahq/holder-core

Platform-agnostic core for a Sovra credential holder/wallet. It bundles the logic a holder app needs, independent of any specific runtime (React Native, browser, …):

  • Platform interfacesSecureStorage, PasskeyProvider, CameraScanner contracts the host app implements.
  • API clientApiClient for issuer/auth-server metadata and token exchange.
  • State storescreateCredentialStore, createApprovalStore (Zustand).
  • Credential managerCredentialManager for parsing/handling SD-JWT VCs.
  • Protocol flowsIssuanceProtocol (OpenID4VCI) and PresentationProtocol (OpenID4VP).
  • Crypto utilitieskeccak256, sha256, P-256 signing, and EIP-712 helpers (exported from @sovrahq/holder-core/utils).

Install

npm install @sovrahq/holder-core

Usage

import { ApiClient, CredentialManager } from "@sovrahq/holder-core";
import { base64urlEncode } from "@sovrahq/holder-core/utils";

The published package ships compiled JavaScript and type declarations from dist/.

FAQs

Package last updated on 02 Jul 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts