
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Janus Token System (JTS) - A two-component authentication architecture for secure, revocable, and confidential API authentication
Janus Token System (JTS) is now available on the official NPM!
The
@engjts/authpackage has now been launched as an official package on the NPM Registry. We invite all users to migrate from local source code to the official NPM package to get the latest updates, bug fixes, and support.
The official @engjts/auth package is now available at:
If you were previously using a package from a local source or an old version, uninstall it first:
npm uninstall jts-core
# or if there is another package name
npm uninstall @engjts/auth-local
npm install @engjts/auth
Make sure all your imports use the official package from NPM:
Before (from local source):
import { JTSAuthServer, JTSResourceServer } from './path/to/local'
import { generateKeyPair } from '../src/crypto'
Now (from NPM):
import { JTSAuthServer, JTSResourceServer, generateKeyPair } from '@engjts/auth'
To use the CLI tools (jts keygen, jts verify, jts inspect, etc.), install them globally:
npm install -g @engjts/auth
Or use npx without a global install:
npx @engjts/auth jts --help
The complete documentation includes:
Visit the NPM package page for complete documentation:
Q: What is JTS (Janus Token System)?
A: JTS is a secure and revocable two-component authentication system. It provides stateless verification with instant revocation and replay attack detection.
Q: Are there any breaking changes from the old version?
A: None. The API remains compatible. You just need to change the import statements to use the NPM package.
Q: What if I find a bug or issue?
A: Report the issue in the GitHub repository:
🔗 https://github.com/ukungzulfah/jts-core/issues
Q: Is there a version for other programming languages?
A: Currently JTS is available for Node.js/TypeScript. For other languages, please follow the project roadmap on GitHub.
If you have difficulty migrating or have questions:
examples/ folderMIT License - see LICENSE file for details.
Thank you for using Janus Token System (JTS)! 🎉
Migrate now to get access to the latest updates and official support.
FAQs
Janus Token System (JTS) - A two-component authentication architecture for secure, revocable, and confidential API authentication
We found that jts-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.