asn1js
asn1js is a pure JavaScript library implementing this standard. ASN.1 is the basis of all X.509 related data structures and numerous other protocols used on the web
4
Versions
BSD-3-Clause
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
peculiarventuresmicroshine
Keywords
asn1parserasn.1berdersequencesetbitstringoctetstringutctimeutf8stringbmpstringuniversalstringgeneralizedtime
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition from individual publisher to GitHub Actions CI/CD with SLSA provenance; this is a security improvement for this established package. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Mature stable ASN.1 library; infrequent publishes are normal. SLSA provenance confirms legitimate CI/CD origin. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a declared runtime dependency used by TypeScript-compiled output; the phantom-dep flag is a false positive for this package's build pattern. | ai |