@verii/crypto
Set of crypto functions used in Verii projects
9
Versions
Apache-2.0
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
gitHead linked
Maintainers
lfdt-npmhyperledger-ghci
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:cborg | AI (phantom-deps): cborg is declared in package.json and referenced in config; phantom-dep heuristic false positive for this package. | ai | |
| phantom-deps | phantom-dep:bigint-crypto-utils | AI (phantom-deps): bigint-crypto-utils is declared in package.json and referenced in config; phantom-dep heuristic false positive for this package. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Hex decode is used for multihash buffer construction (IPFS-style content addressing), a standard cryptographic pattern with no obfuscation or exfiltration. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 decode is standard input parsing for a decryption function; no malicious payload hiding pattern present. | ai | |
| typosquat | typosquat.levenshtein:bcrypt | AI (typosquat): Scoped package @verii/crypto is a legitimate general crypto utility from the LFDT-Verii org; coincidental edit distance to bcrypt, not an impersonation. | ai |