@li0ard/sm3
SM3 hash function in pure TypeScript
3
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
li0ard
Keywords
sm3cryptoshangmi
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions with SLSA provenance; this is an intentional CI/CD publishing setup by the same author. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @noble/hashes is a well-known, trusted crypto library; appropriate dependency for an SM3 hash implementation. | ai |