← Home

@node-rs/argon2-wasm32-wasi

npm Repository Homepage

RustCrypto: Argon2 binding for Node.js

4
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

broooooklyndxd_sjtu

Keywords

argon2argon2-passwordcryptopasswordencryptionhashinghashsecureverify

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata bundled-binaries AI (npm-metadata): WASM binary is the package's compiled crypto module, expected for this binding. ai
semgrep semgrep:toplevel-fetch AI (semgrep): fetch() loads the WASM binary in the browser bundle — correct and expected for a WASI package. ai

Versions (showing 4 of 4)

Version Deps Published
2.0.2 1 / 0
2.0.1 1 / 0
2.0.0 1 / 0
1.7.0 4 / 0

v2.0.1

2 findings
HIGH Bundled binary files (1) npm-metadata

Package contains compiled binaries that could be backdoors: • argon2.wasm32-wasi.wasm

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

2 findings
HIGH Bundled binary files (1) npm-metadata

Package contains compiled binaries that could be backdoors: • argon2.wasm32-wasi.wasm

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.