Socket
Socket
Sign inDemoInstall

ghsign

Package Overview
Dependencies
55
Maintainers
5
Versions
27
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    ghsign

Sign/verify data using your local ssh private key and your public key from Github


Version published
Maintainers
5
Install size
4.29 MB
Created

Readme

Source

ghsign

Sign/verify data using your local ssh private key and your public key from Github

npm install ghsign

Build status js-standard-style

Usage

var ghsign = require('ghsign')

// create a signer (has be your own Github username)
var sign = ghsign.signer('mafintosh')

// create a verifier (can be any Github username)
var verify = ghsign.verifier('mafintosh')

// sign some data
sign('test', function(err, sig) {
  console.log('test signature is', sig)

  // verify the signature
  verify('test', sig, function(err, valid) {
    console.log('wat test signed by mafintosh?', valid)
  })
})

Creating a signer will fetch your public keys from github and use your corresponding local ssh private key to sign the data. The verifier will verify the signature by also fetching the public keys from Github.

License

MIT

Keywords

FAQs

Last updated on 23 Mar 2018

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc