@noble/secp256k1
Fastest 5KB JS implementation of secp256k1 ECDH & ECDSA signatures compliant with RFC6979
24
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
paulmillr
Keywords
secp256k1rfc6979signatureecdsanoblecryptographyelliptic curveecccurveschnorrbitcoinethereum
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): paulmillr intentionally migrated @noble packages to GitHub Actions CI publishing with SLSA/Sigstore attestation as a supply chain hardening measure. This transition is expected and stable. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Mature, stable cryptographic library with infrequent but legitimate releases. SLSA attestation confirms release origin; dormancy is consistent with the package's release cadence. | ai |
Versions (showing 24 of 24)
| Version | Deps | Published |
|---|---|---|
| 3.1.0 | 0 / 6 | |
| 3.0.0 | 0 / 6 | |
| 2.3.0 | 0 / 8 | |
| 2.2.3 | 0 / 6 | |
| 2.2.2 | 0 / 6 | |
| 2.1.0 | 0 / 6 | |
| 2.0.0 | 0 / 5 | |
| 1.7.1 | 0 / 12 | |
| 1.7.0 | 0 / 12 | |
| 1.6.3 | 0 / 12 | |
| 1.6.2 | 0 / 12 | |
| 1.6.1 | 0 / 12 | |
| 1.6.0 | 0 / 12 | |
| 1.5.5 | 0 / 12 | |
| 1.5.4 | 0 / 12 | |
| 1.5.3 | 0 / 12 | |
| 1.5.2 | 0 / 12 | |
| 1.5.0 | 0 / 12 | |
| 1.4.0 | 0 / 12 | |
| 1.3.4 | 0 / 11 | |
| 1.3.3 | 0 / 11 | |
| 1.3.2 | 0 / 11 | |
| 1.3.1 | 0 / 11 | |
| 1.3.0 | 0 / 12 |