Security News
Node.js TSC Votes to Stop Distributing Corepack
Corepack will be phased out from future Node.js releases following a TSC vote.
By Sarah Gooding - Mar 19, 2025
New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More →
@veramo/did-comm
Advanced tools
Veramo DIDComm
Veramo messaging plugin implementing DIDComm v2, as specified by the DIDComm v2 Spec as well as certain "DIDComm Protocols"
Spec Compliance
Message Formats
Message Envelopes:
| Envelope | Veramo 'packing' | IANA type (typ) | packDIDCommMessage | unpackDIDCommMessage | notes |
|---|---|---|---|---|---|
| plaintext | 'none' | application/didcomm-plain+json | [X] | [X] | |
| signed(plaintext) | 'jws' | application/didcomm-signed+json | [X] | [X] | |
| anoncrypt(plaintext) | 'anoncrypt' | application/didcomm-encrypted+json | [X] | [X] | |
| authcrypt(plaintext) | 'authcrypt' | application/didcomm-encrypted+json | [X] | [X] | |
| anoncrypt(sign(plaintext)) | 'anoncrypt+jws' | application/didcomm-encrypted+json | [ ] | [ ] | |
| authcrypt(sign(plaintext)) | 'authcrypt+jws' | application/didcomm-encrypted+json | [ ] | [ ] | SHOULD NOT be emitted, but MAY be accepted |
| anoncryptauthcrypt((sign(plaintext))) | '' | application/didcomm-encrypted+json | [ ] | [ ] |
FAQs
Veramo messaging plugin implementing DIDComm v2.
The npm package @veramo/did-comm receives a total of 2,147 weekly downloads. As such, @veramo/did-comm popularity was classified as popular.
We found that @veramo/did-comm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Package last updated on 27 Feb 2025
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Research
Security News
Black Basta’s Dependency Confusion Ambitions and Ransomware in Open Source Ecosystems
Research uncovers Black Basta's plans to exploit package registries for ransomware delivery alongside evidence of similar attacks already targeting open source ecosystems.
By Kirill Boychenko - Mar 19, 2025
Security News
Oxlint Now in Beta with 500+ Built-in Rules and 2X Faster JavaScript Linting
Oxlint's beta release introduces 500+ built-in linting rules while delivering twice the speed of previous versions, with future support planned for custom plugins and improved IDE integration.
By Sarah Gooding - Mar 18, 2025