
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
jwt-status-list
Advanced tools
[](https://codecov.io/gh/cre8/Token-Status-List)
This implementation is based on the this IETF draft
This status list is an encoded bit string where the status can be represented by multiple bits. This library provides functions to create and read the status list from a JWT and also to verify the status of a specific entry.
npm install jwt-status-list
Creation of a JWT Status List:
// pass the list as an array and the amount of bits per entry.
const list = new StatusList([1, 0, 1, 1, 1], 1);
const iss = 'https://example.com';
const payload: JWTPayload = {
iss,
sub: `${iss}/statuslist/1`,
iat: new Date().getTime() / 1000,
};
const header: JWTHeaderParameters = { alg: 'ES256' };
const jwt = createUnsignedJWT(list, payload, header);
// Sign the JWT with the private key
const signedJwt = await jwt.sign(privateKey);
Interaction with a JWT Status List:
//validation of the JWT is not provided by this library!!!
// jwt that includes the status list reference
const reference = getStatusListFromJWT(jwt);
// download the status list
const list = await fetch(reference.uri);
//TODO: validate that the list jwt is signed by the issuer and is not expired!!!
//extract the status list
const statusList = getListFromStatusListJWT(list);
//get the status of a specific entry
const status = statusList.getStatus(reference.idx);
// handle the status
Install the dependencies:
pnpm install
Run the tests:
pnpm test
FAQs
[](https://codecov.io/gh/cre8/Token-Status-List)
The npm package jwt-status-list receives a total of 0 weekly downloads. As such, jwt-status-list popularity was classified as not popular.
We found that jwt-status-list demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.