New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

hypercore-signing-request

Package Overview
Dependencies
Maintainers
2
Versions
17
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

hypercore-signing-request

Generate shareable signing requests for Hypercore

latest
Source
npmnpm
Version
5.2.0
Version published
Weekly downloads
626
-8.08%
Maintainers
2
Weekly downloads
 
Created
Source

hypercore-signing-request

Generate shareable signing requests for Hypercore

npm install hypercore-signing-request

Useful for manual multisig

Usage

const { generate, decode, signable } = require('hypercore-signing-request')

API

requestBuffer = await generate(coreOrDrive, { length = core.length })

Generate a signing request, returned as a buffer so it can be shared. Only works for non-compat cores (ie manifest backed).

Alternatvely a Hyperdrive can be passed and a joint request for signing both metadata and blob cores will be generated. Only works for v1 manifest backed Hyperdrives.

req = decode(requestBuffer)

Decode the signing request. Looks like this:

{
  version, // request version
  id, // hypercore id
  key, // the key as well
  manifest, // core manifest
  treeHash, // the tree hash
  length, // the core length
  fork // the core fork id
}

responseBuffer = encodeResponse(response)

Encode the signing response. Looks like this:

{
  version, // request version
  publicKey, // signer public key
  requestHash, // request hash
  signatures // array of signatures
}

res = encodeResponse(responseBuffer)

Decode the signing response.

buffer = signable(publicKey, req)

Get the buffer to sign. Pass your public key and it validates that you can sign it.

License

Apache-2.0

FAQs

Package last updated on 02 Apr 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts