← Home

libsodium-wrappers

The Sodium cryptographic library compiled to pure JavaScript (wrappers)

44
Versions
ISC
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

jedisct1

Keywords

cryptosodiumlibsodiumnaclchacha20poly1305curve25519ed25519blake2siphashargon2ecc

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): Long-standing trusted maintainer (jedisct1/Frank Denis); missing gitHead reflects a publish environment change, not a security concern. ai
provenance no-provenance AI (provenance): libsodium-wrappers predates Sigstore; lack of provenance attestation is expected for this long-standing package. ai
source-diff obfuscated-file:dist/modules-esm/libsodium-wrappers.mjs AI (source-diff): Minified ESM bundle of libsodium wrappers; content is clearly crypto API bindings, not obfuscation. Stable for this package. ai

Versions (showing 44 of 44)

Version Deps Published
0.8.4 1 / 2
0.8.3 1 / 2
0.8.2 1 / 2
0.8.1 1 / 1
0.8.0 1 / 1
0.7.16 1 / 1
0.7.15 1 / 1
0.7.14 1 / 1
0.7.13 1 / 5
0.7.11 1 / 5
0.7.10 1 / 5
0.7.9 1 / 5
0.7.8 1 / 5
0.7.7 1 / 0
0.7.6 1 / 0
0.7.5 1 / 0
0.7.4 1 / 0
0.7.3 1 / 0
0.7.2 1 / 0
0.7.1 1 / 0
0.7.0 1 / 0
0.5.4 1 / 0
0.5.2 1 / 0
0.5.1 1 / 0
0.5.0 1 / 0
0.4.9 1 / 0
0.4.8 1 / 0
0.4.7 1 / 0
0.4.6 1 / 0
0.4.1 1 / 0
0.4.0 1 / 0
0.3.1 1 / 0
0.3.0 1 / 0
0.2.12 1 / 0
0.2.11 1 / 0
0.2.10 1 / 0
0.2.9 1 / 0
0.2.8 1 / 0
0.2.7 1 / 0
0.2.6 1 / 0
0.2.5 1 / 0
0.2.4 1 / 0
0.2.3 1 / 0
0.2.2 0 / 0