@verii/jwt
Set of JWT related functions used in Verii projects
14
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
lfdt-npmhyperledger-ghci
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:jest | AI (typosquat): @verii/jwt is a scoped JWT library from LFDT-Verii org; Levenshtein match to 'jest' is a false positive with no semantic or visual similarity. | ai | |
| typosquat | typosquat.levenshtein:got | AI (typosquat): @verii/jwt is a scoped JWT library from LFDT-Verii org; Levenshtein match to 'got' is a false positive with no semantic or visual similarity. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): @verii/jwt is a scoped JWT library from LFDT-Verii org; Levenshtein match to 'joi' is a false positive with no semantic or visual similarity. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Base64 decoding in core.js is standard JWT payload parsing — expected and benign for a JWT library. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Hex decoding in key-transformer.js is standard cryptographic key format conversion — expected and benign for a JWT/crypto library. | ai |