blamejs / pki

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 0 paquetes directos y 207 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 207 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 0 tienen avisos conocidos, de los cuales 0 son directas.

Ningún aviso conocido afecta a las dependencias evaluadas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "asn1",
        "cryptography",
        "nodejs",
        "pki",
        "post-quantum",
        "webcrypto",
        "x509",
        "zero-dependencies"
      ],
      "is_fork": false,
      "size_kb": 5936,
      "has_wiki": false,
      "homepage": "https://pkijs.com",
      "languages": {
        "Shell": 15939,
        "Dockerfile": 1207,
        "JavaScript": 4760059
      },
      "pushed_at": "2026-07-23T16:18:52Z",
      "created_at": "2026-07-04T07:43:09Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-18T08:41:37Z",
      "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "JavaScript",
      "significant_languages": [
        "JavaScript"
      ]
    },
    "owner": {
      "blog": "https://blamejs.com",
      "name": "BlameJS",
      "type": "Organization",
      "login": "blamejs",
      "company": null,
      "location": null,
      "followers": 1,
      "avatar_url": "https://avatars.githubusercontent.com/u/279348746?v=4",
      "created_at": "2026-04-25T22:33:50Z",
      "is_verified": null,
      "public_repos": 5,
      "account_age_days": 88
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.3.8",
          "kind": "patch",
          "published_at": "2026-07-18T08:44:15Z"
        },
        {
          "tag": "v0.3.7",
          "kind": "patch",
          "published_at": "2026-07-18T01:12:09Z"
        },
        {
          "tag": "v0.3.6",
          "kind": "patch",
          "published_at": "2026-07-17T19:51:16Z"
        },
        {
          "tag": "v0.3.5",
          "kind": "patch",
          "published_at": "2026-07-17T19:10:05Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-07-17T17:27:12Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-07-17T09:22:04Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-07-17T08:29:00Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-07-17T07:13:41Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-17T06:01:20Z"
        },
        {
          "tag": "v0.2.33",
          "kind": "patch",
          "published_at": "2026-07-17T00:30:43Z"
        },
        {
          "tag": "v0.2.32",
          "kind": "patch",
          "published_at": "2026-07-16T23:58:16Z"
        },
        {
          "tag": "v0.2.31",
          "kind": "patch",
          "published_at": "2026-07-16T21:11:42Z"
        },
        {
          "tag": "v0.2.30",
          "kind": "patch",
          "published_at": "2026-07-16T18:35:40Z"
        },
        {
          "tag": "v0.2.29",
          "kind": "patch",
          "published_at": "2026-07-16T15:09:18Z"
        },
        {
          "tag": "v0.2.28",
          "kind": "patch",
          "published_at": "2026-07-16T14:07:51Z"
        },
        {
          "tag": "v0.2.27",
          "kind": "patch",
          "published_at": "2026-07-16T13:19:02Z"
        },
        {
          "tag": "v0.2.26",
          "kind": "patch",
          "published_at": "2026-07-16T12:40:16Z"
        },
        {
          "tag": "v0.2.25",
          "kind": "patch",
          "published_at": "2026-07-16T11:51:57Z"
        },
        {
          "tag": "v0.2.24",
          "kind": "patch",
          "published_at": "2026-07-16T09:48:42Z"
        },
        {
          "tag": "v0.2.23",
          "kind": "patch",
          "published_at": "2026-07-16T08:34:33Z"
        },
        {
          "tag": "v0.2.22",
          "kind": "patch",
          "published_at": "2026-07-16T03:52:40Z"
        },
        {
          "tag": "v0.2.21",
          "kind": "patch",
          "published_at": "2026-07-16T01:36:28Z"
        },
        {
          "tag": "v0.2.20",
          "kind": "patch",
          "published_at": "2026-07-15T22:56:31Z"
        },
        {
          "tag": "v0.2.19",
          "kind": "patch",
          "published_at": "2026-07-14T16:15:40Z"
        },
        {
          "tag": "v0.2.18",
          "kind": "patch",
          "published_at": "2026-07-14T07:51:12Z"
        },
        {
          "tag": "v0.2.17",
          "kind": "patch",
          "published_at": "2026-07-14T04:29:59Z"
        },
        {
          "tag": "v0.2.16",
          "kind": "patch",
          "published_at": "2026-07-14T02:43:53Z"
        },
        {
          "tag": "v0.2.15",
          "kind": "patch",
          "published_at": "2026-07-14T00:57:05Z"
        },
        {
          "tag": "v0.2.14",
          "kind": "patch",
          "published_at": "2026-07-13T21:48:58Z"
        },
        {
          "tag": "v0.2.13",
          "kind": "patch",
          "published_at": "2026-07-13T19:16:40Z"
        },
        {
          "tag": "v0.2.12",
          "kind": "patch",
          "published_at": "2026-07-13T18:40:07Z"
        },
        {
          "tag": "v0.2.11",
          "kind": "patch",
          "published_at": "2026-07-13T17:31:14Z"
        },
        {
          "tag": "v0.2.10",
          "kind": "patch",
          "published_at": "2026-07-13T16:02:00Z"
        },
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2026-07-13T10:50:06Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2026-07-13T08:59:48Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2026-07-13T07:30:21Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-07-13T05:43:25Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-07-13T00:37:32Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-07-12T18:34:31Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-07-12T08:09:33Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-07-12T03:34:55Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-07-12T01:49:46Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-07-11T23:27:33Z"
        },
        {
          "tag": "v0.1.32",
          "kind": "patch",
          "published_at": "2026-07-11T18:50:22Z"
        },
        {
          "tag": "v0.1.31",
          "kind": "patch",
          "published_at": "2026-07-11T16:10:33Z"
        },
        {
          "tag": "v0.1.30",
          "kind": "patch",
          "published_at": "2026-07-11T07:40:19Z"
        },
        {
          "tag": "v0.1.29",
          "kind": "patch",
          "published_at": "2026-07-11T05:59:51Z"
        },
        {
          "tag": "v0.1.28",
          "kind": "patch",
          "published_at": "2026-07-11T04:48:21Z"
        },
        {
          "tag": "v0.1.27",
          "kind": "patch",
          "published_at": "2026-07-11T01:52:01Z"
        },
        {
          "tag": "v0.1.26",
          "kind": "patch",
          "published_at": "2026-07-10T23:33:45Z"
        },
        {
          "tag": "v0.1.25",
          "kind": "patch",
          "published_at": "2026-07-10T18:30:12Z"
        },
        {
          "tag": "v0.1.24",
          "kind": "patch",
          "published_at": "2026-07-10T12:58:53Z"
        },
        {
          "tag": "v0.1.23",
          "kind": "patch",
          "published_at": "2026-07-10T06:17:20Z"
        },
        {
          "tag": "v0.1.22",
          "kind": "patch",
          "published_at": "2026-07-09T18:47:40Z"
        },
        {
          "tag": "v0.1.21",
          "kind": "patch",
          "published_at": "2026-07-09T15:14:01Z"
        },
        {
          "tag": "v0.1.20",
          "kind": "patch",
          "published_at": "2026-07-09T14:18:19Z"
        },
        {
          "tag": "v0.1.19",
          "kind": "patch",
          "published_at": "2026-07-09T11:34:47Z"
        },
        {
          "tag": "v0.1.18",
          "kind": "patch",
          "published_at": "2026-07-09T03:56:52Z"
        },
        {
          "tag": "v0.1.17",
          "kind": "patch",
          "published_at": "2026-07-07T05:31:57Z"
        },
        {
          "tag": "v0.1.16",
          "kind": "patch",
          "published_at": "2026-07-06T19:49:51Z"
        },
        {
          "tag": "v0.1.15",
          "kind": "patch",
          "published_at": "2026-07-06T08:33:58Z"
        },
        {
          "tag": "v0.1.14",
          "kind": "patch",
          "published_at": "2026-07-06T02:36:08Z"
        },
        {
          "tag": "v0.1.13",
          "kind": "patch",
          "published_at": "2026-07-06T00:05:28Z"
        },
        {
          "tag": "v0.1.12",
          "kind": "patch",
          "published_at": "2026-07-05T20:48:27Z"
        },
        {
          "tag": "v0.1.11",
          "kind": "patch",
          "published_at": "2026-07-05T20:11:15Z"
        },
        {
          "tag": "v0.1.10",
          "kind": "patch",
          "published_at": "2026-07-05T18:33:42Z"
        },
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2026-07-05T08:38:32Z"
        },
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2026-07-05T06:27:54Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-07-05T03:53:00Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2026-07-04T22:47:20Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-07-04T20:33:14Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2026-07-04T19:58:59Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2026-07-04T19:31:55Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-07-04T19:12:09Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-07-04T12:49:24Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "29f9cd4e66a54e3ed64980ee80907dd5deefde0a",
          "body": "…ages, with a pki.schema.detectFormat companion. (#96)\n\n* 0.3.8 — Human-readable inspection extends to CRLs, CSRs, and CMS messages, with a pki.schema.detectFormat companion.\n\npki.inspect gains the non-certificate half of its OpenSSL-style report surface. pki.inspect.crl renders a certificate revoca\n[…]\ncan relate a delta CRL to its base, falling back to hex only when the\nvalue is malformed.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.8 — Human-readable inspection extends to CRLs, CSRs, and CMS mess…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-18T08:41:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "51dd178b33c7d36c41f0a45fc37519c67a89dbff",
          "body": "…ope certificate lints. (#89)\n\n* 0.3.7 — pki.lint gains seven RFC 5280 extension-criticality and CA-scope certificate lints.\n\npki.lint.certificate now flags certificates that parse cleanly but violate RFC 5280's extension-criticality and CA-scope requirements -- profile faults the strict codec does \n[…]\nop level and one level deep, and confirming every case fails\nclosed rather than crashing.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.7 — pki.lint gains seven RFC 5280 extension-criticality and CA-sc…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-18T01:09:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fbf9fe75341ab58ee471ebd8549a8b52472a7be1",
          "body": "…ocation, key-recovery, general, error, poll, and confirmation responses complete the RFC 9810 message surface. (#88)\n\n* 0.3.6 — pki.cmp.build gains the CA/responder side -- certificate, revocation, key-recovery, general, error, poll, and confirmation responses complete the RFC 9810 message surface.\n[…]\nencryptedCert\nalternative now fails closed rather than silently emitting the certificate.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.6 — pki.cmp.build gains the CA/responder side -- certificate, rev…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-17T19:48:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "73d6b40a4167d7c3491dbca8f928f8bc471f72b7",
          "body": "… certificate requests, confirmations, revocations, and general messages, protected by a sender-key signature or a PBMAC1 shared secret. (#87)\n\n* 0.3.5 — pki.cmp.build assembles protected RFC 9810 CMP PKIMessages -- certificate requests, confirmations, revocations, and general messages, protected by\n[…]\nbefore it is placed in extraCerts, so a malformed certificate\nfails closed at build time.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.5 — pki.cmp.build assembles protected RFC 9810 CMP PKIMessages --…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-17T19:07:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0fa4c1b3c02409f1dd36cc65c1a0d1f8e2d31712",
          "body": "…ER X.509 certificate compresses to a compact, byte-exact-invertible type-3 C509, and a deterministic-CBOR encoder joins pki.cbor. (#86)\n\n* 0.3.4 — pki.schema.c509.encode produces C509 CBOR certificates -- a DER X.509 certificate compresses to a compact, byte-exact-invertible type-3 C509, and a dete\n[…]\nd its catch body sits on its own line so the execution-traced swallow gate can\nverify it.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.4 — pki.schema.c509.encode produces C509 CBOR certificates -- a D…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-17T17:24:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "78c2bbb47072bd73541a9886d7e0e9d255ca9e8f",
          "body": "…- a CertReqMessages with a signature proof of possession, over every algorithm the toolkit supports. (#85)\n\n* 0.3.3 — pki.crmf.build issues RFC 4211 certificate request messages -- a CertReqMessages with a signature proof of possession, over every algorithm the toolkit supports.\n\nThe CMP/EST enroll\n[…]\n. A non-object pop selector is also rejected rather than\nsilently treated as the default.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.3 — pki.crmf.build issues RFC 4211 certificate request messages -…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-17T09:19:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "acfa9818622c15a61bbd298e81745ff0c5fea998",
          "body": "…n Attribute Authority binds a holder to privilege attributes and signs with any algorithm the toolkit supports. (#84)\n\n* 0.3.2 — pki.attrcert.sign issues RFC 5755 attribute certificates -- an Attribute Authority binds a holder to privilege attributes and signs with any algorithm the toolkit support\n[…]\n rejected if marked\ncritical -- so the hatch cannot ship a profile-violating criticality.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.2 — pki.attrcert.sign issues RFC 5755 attribute certificates -- a…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-17T08:26:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2ec08610de4a22f2321f286744b401e7e2249d18",
          "body": "…gned by the subject key for proof of possession, over every signature algorithm the toolkit supports. (#83)\n\n* 0.3.1 — pki.csr.sign issues PKCS#10 certification requests -- self-signed by the subject key for proof of possession, over every signature algorithm the toolkit supports.\n\nThe enrollment p\n[…]\nthod-1 subjectKeyIdentifier SHA-1\njustification onto the line the crypto linter inspects.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.1 — pki.csr.sign issues PKCS#10 certification requests -- self-si…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-17T07:10:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "771b7fa3c2a77f36544828509ffd9fbf8104cb85",
          "body": "…signed, over every signature algorithm the toolkit supports, from RSA and ECDSA through EdDSA, ML-DSA, and SLH-DSA. (#82)\n\n* 0.3.0 — pki.x509.sign issues X.509 certificates -- self-signed or CA-signed, over every signature algorithm the toolkit supports, from RSA and ECDSA through EdDSA, ML-DSA, an\n[…]\ns a non-CA), pathLen a non-negative integer, and only the recognized fields are accepted.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.3.0 — pki.x509.sign issues X.509 certificates -- self-signed or CA-…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-17T05:58:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae7942b7e122a0c710ed71998ddf05774e5d5a77",
          "body": "…alues and attribute-certificate extensions, not just the certificate structure. (#81)\n\n* 0.2.33 — Attribute certificates now decode their RFC 5755 attribute values and attribute-certificate extensions, not just the certificate structure.\n\npki.schema.attrcert.parse previously surfaced each attribute\n[…]\nalternative in proxying; also decode the legacy RFC 3281 id-at-clearance OID as clearance\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.33 — Attribute certificates now decode their RFC 5755 attribute v…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-17T00:28:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a1fbfa85ea2403bcc76f45f9c281f4622f9172e",
          "body": "… Certificate Services enrollment extensions, and pki.lint's critical-extension check is aligned with certification-path validation. (#80)\n\n* 0.2.32 — X.509 certificates now decode the Microsoft Active Directory Certificate Services enrollment extensions, and pki.lint's critical-extension check is a\n[…]\nlgorithm) -- so an empty or other-length value fails closed as malformed renewal metadata\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.32 — X.509 certificates now decode the Microsoft Active Directory…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T22:35:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dd8b4727f7718df94b1a70746ad8a79134376477",
          "body": "…-5 qualified-certificate qcStatements extension, and the sigstore verifier gains a low-order EdDSA public-key gate. (#79)\n\n* 0.2.31 — X.509 certificates now decode the RFC 3739 / ETSI EN 319 412-5 qualified-certificate qcStatements extension, and the sigstore verifier gains a low-order EdDSA public\n[…]\n qcStatements renderer-coverage vectors -- it is already in scope from the decode vectors\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.31 — X.509 certificates now decode the RFC 3739 / ETSI EN 319 412…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T21:09:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "44230237805365469d23481c4010bd4852e340ed",
          "body": "…se: decode the compact CBOR profile of X.509 in both its natively-signed and X.509-re-encoded forms, reconstructing the original DER byte-for-byte so the original signature still verifies. (#78)\n\n* 0.2.30 — C509 CBOR-encoded certificates arrive as pki.schema.c509.parse: decode the compact CBOR prof\n[…]\nI-48/64 length check variable to avoid a mislabeled non-secret constant-time-compare flag\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.30 — C509 CBOR-encoded certificates arrive as pki.schema.c509.par…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T18:33:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "13da60c8f773b536fd6695e95c21354670bfa3e0",
          "body": "…ives as pki.ct.verifyLogListSignature: verify the detached signature published alongside the CT log list against a caller-pinned signer key, completing the offline log-list trust chain. (#77)\n\n* 0.2.29 — Certificate Transparency log-list signature verification arrives as pki.ct.verifyLogListSignatu\n[…]\n rejecting an out-of-range component before verification rather than only the r=s=0 shape\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.29 — Certificate Transparency log-list signature verification arr…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T15:06:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a340f2ed6157bb93a716514e8394ebea2539d3c4",
          "body": "…as pki.ct.parseLogList and pki.ct.verifySctWithLogList: resolve a trusted CT log's key from an SCT's log id and verify it in one step, ingesting the CT log-list JSON into state- and temporal-interval-constrained trusted logs. (#76)\n\nUntil now pki.ct.verifySct required the caller to supply the corre\n[…]\nfor a valid signature from a trusted, in-window log, false on a cryptographic mismatch, and throws a typed CtError on any structural or trust failure.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.28 — The Certificate Transparency log-list trust surface arrives …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T14:05:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d66e6ded72b7fac0bd55ae736881f219ac18ba7d",
          "body": "…ompress, with the matching S/MIME pki.smime.compress / pki.smime.decompress: compress and recover RFC 3274 messages, with a bounded inflate that defends the decompression-bomb class. (#75)\n\npki.cms.compress(content, opts) ZLIB-compresses content and wraps it as a CMS CompressedData (RFC 3274) -- ve\n[…]\ny, or authentication (RFC 8551 section 2.4.5). Receive-tolerant: OpenSSL's legacy application/x-pkcs7-mime and a missing smime-type are both accepted.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.27 — CMS CompressedData arrives as pki.cms.compress / pki.cms.dec…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T13:16:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6382864d03f67a8a06cc6acff7408f789c109876",
          "body": "…ecrypt: envelope and open RFC 8551 encrypted messages over the CMS layer, with AES-GCM authenticated enveloping as the default and bidirectional OpenSSL interoperability. (#74)\n\npki.smime.encrypt(content, recipients, opts) envelopes a MIME entity as an encrypted S/MIME message and pki.smime.decrypt\n[…]\nsigned S/MIME message is returned for the caller to feed back to pki.smime.verify. Bidirectionally interoperable with openssl cms -encrypt / -decrypt.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.26 — S/MIME encryption arrives as pki.smime.encrypt / pki.smime.d…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T12:36:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b4786569b76f7222fef91e835ae18b8a300601d",
          "body": "…i.smime: sign and verify RFC 8551 multipart/signed and application/pkcs7-mime messages over the CMS layer, bidirectionally interoperable with OpenSSL. (#73)\n\n* 0.2.25 — S/MIME signed-message assembly and verification arrive as pki.smime: sign and verify RFC 8551 multipart/signed and application/pkc\n[…]\n explicit map -- the prior blind sha->sha- fallback corrupted \"shake128\" into \"sha-ke128\"\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.25 — S/MIME signed-message assembly and verification arrive as pk…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T11:49:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88eaf3e34a98cbb5df10a33cd35179855ffb28c5",
          "body": "… builds an RFC 6962 SignedCertificateTimestampList byte-for-byte, and signSct performs a Certificate Transparency log's signing step, completing the parse/verify/encode/sign symmetry. (#72)\n\n* 0.2.24 — SCT-list encoding and log signing join pki.ct: encodeSctList builds an RFC 6962 SignedCertificate\n[…]\nert the deterministic no-plaintext-leak property instead of a probabilistic padding fault\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.24 — SCT-list encoding and log signing join pki.ct: encodeSctList…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T09:46:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e11697c33c9d25af905d6885e09fa816c685a7f",
          "body": "…s.decrypt: EnvelopedData, AuthEnvelopedData, and EncryptedData with every RFC 5652 recipient type -- RSA-OAEP, ephemeral-static ECDH, X25519/X448, symmetric key-wrap, password, and post-quantum ML-KEM (RFC 9629/9936) -- and a single, oracle-free decryption verdict. (#71)\n\n* 0.2.23 — CMS content enc\n[…]\n to the same caps the decryptor enforces so a self-undecryptable message is never emitted\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.23 — CMS content encryption arrives as pki.cms.encrypt and pki.cm…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T08:31:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7fed8b952800d787ebabfec57d40f14e4b5aea14",
          "body": "… as pki.ocsp: build and sign OCSP requests and responses, mint unsigned error responses, and verify a response end to end against the same hardened responder-authorization, signature, CertID, currency, and nonce gates the certification-path revocation checker runs. (#70)\n\n* 0.2.22 — The RFC 6960 OC\n[…]\nocspChecker is unaffected (it receives an issuer already chained by\nthe path validation).\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.22 — The RFC 6960 OCSP producer and relying-party surface arrives…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T03:50:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "807e80187f3e04d227ebd706ebf94e179bf39770",
          "body": "…keys (RFC 9935 / FIPS 203) become a first-class, fail-closed surface: certification-path validation enforces the keyEncipherment-only key usage, key import validates the private-key CHOICE and rejects an inconsistent key with a typed error, and pki.lint gains the RFC 9935 certificate rows. (#69)\n\n*\n[…]\nl pin each arm explicitly.\nVerified on node:24-alpine (the CI runtime): full smoke green.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.21 — ML-KEM public keys in X.509 certificates and PKCS#8 private …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-16T01:34:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8388f199b95209651bbb72cdae1c09603908bc94",
          "body": "… not a CBOR map is now rejected with a typed webauthn/bad-attestation-object at parse instead of surfacing an untyped error from a format verifier, and the strict CBOR codec gains pki.cbor.read.mapGet -- a keyed map lookup that asserts the map's major type inside the accessor. (#68)\n\nA decoded CBOR\n[…]\ns its pairs through pki.cbor.read.map, which asserts the major type -- malformed hostile bytes are a typed webauthn/* verdict, never an untyped crash.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.20 — A WebAuthn attestation object whose attestation statement is…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-15T22:54:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29629df7d193b6495685078ee9743c2c5a1dc8b6",
          "body": "…p.request and pki.tsp.response build and parse the protocol's request and response messages, and pki.tsp.verify verifies a timestamp token end to end -- the CMS signature, the message imprint, the ESSCertID(V2) certificate binding, the critical timeStamping-only extendedKeyUsage, and full validatio\n[…]\n example a SET)\n  carrying a byte-equal GeneralName no longer contributes a TSA identity.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.19 — The RFC 3161 Time-Stamp Protocol surface is complete: pki.ts…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-14T16:13:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "58c273db01920dd17699530c8499352e78d620a9",
          "body": "…n and pki.cms.verify now produce and verify a composite SignerInfo -- a post-quantum ML-DSA paired with a traditional RSA, ECDSA, or EdDSA -- accepted only when BOTH components verify. (#66)\n\n* 0.2.18 — Composite ML-DSA signatures join CMS SignedData: pki.cms.sign and pki.cms.verify now produce and\n[…]\norged JWS verify -- the same gate the certificate,\nCMS, and composite verify paths apply.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.18 — Composite ML-DSA signatures join CMS SignedData: pki.cms.sig…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-14T07:19:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97b42ca422e43c39c60be7dd59c605525e2a3517",
          "body": "…pki.cms.verify now sign and verify with all twelve FIPS 205 SLH-DSA parameter sets (RFC 9814), freely mixed with the classical and ML-DSA signers in one message. (#65)\n\n* 0.2.17 — Post-quantum SLH-DSA joins CMS SignedData: pki.cms.sign and pki.cms.verify now sign and verify with all twelve FIPS 205\n[…]\nest. The paired-digest map is shared from the signing path\nso the two sides cannot drift.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.17 — Post-quantum SLH-DSA joins CMS SignedData: pki.cms.sign and …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-14T04:27:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55e89f502f0feced2a5bc6dbb3976dc71243f6fe",
          "body": "…ki.cms.verify now sign and verify with ML-DSA-44/65/87 (RFC 9882), freely mixed with the classical signers in one message. (#64)\n\n* 0.2.16 — Post-quantum ML-DSA joins CMS SignedData: pki.cms.sign and pki.cms.verify now sign and verify with ML-DSA-44/65/87 (RFC 9882), freely mixed with the classical\n[…]\ns in both modules are the documented, upstream-\ncontract-unreachable defensive fallbacks.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.16 — Post-quantum ML-DSA joins CMS SignedData: pki.cms.sign and p…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-14T02:41:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f4925facd4e1ba38deddf8553b435481b9d46be",
          "body": "… timestamp token creation as pki.tsp.sign -- the producing sides of the CMS and timestamp verifiers, emitting exactly what pki.cms.verify and OpenSSL cms -verify accept. (#63)\n\n* 0.2.15 — CMS SignedData signing arrives as pki.cms.sign, and RFC 3161 timestamp token creation as pki.tsp.sign -- the pr\n[…]\ngate on installations that advertise\nthe signature algorithm but lack CMS support for it.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.15 — CMS SignedData signing arrives as pki.cms.sign, and RFC 3161…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-14T00:54:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d690e5a6eb7792cfcb10142ae961b32d9a7613d",
          "body": "…ify -- verifying a signed message (S/MIME, timestamps, code signing) over the exact RFC 5652 preimage, for attached and detached content, one or many signers, across RSA, RSASSA-PSS, ECDSA, and EdDSA. (#62)\n\n* 0.2.14 — CMS SignedData signature verification arrives as pki.cms.verify -- verifying a s\n[…]\nding certificate placed before the real signer cannot make a valid signature read invalid\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.14 — CMS SignedData signature verification arrives as pki.cms.ver…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T21:46:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d41022783f0c280ae06e2b2c4b4fe052304c55c",
          "body": "…h a strict in-house checker instead of node:net, so the toolkit pulls in no networking module. (#61)\n\n* 0.2.13 — The certificate linter validates IP-literal common names with a strict in-house checker instead of node:net, so the toolkit pulls in no networking module.\n\npki.lint's commonName-in-subje\n[…]\nsec. 4.2.2 and node:net.isIP. Verified against net.isIP across a 20k-string parity sweep.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.13 — The certificate linter validates IP-literal common names wit…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T19:14:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "333f0bacb62d53c89fb9bb0697f69ba09f5f841b",
          "body": "…ignature against a Certificate Transparency log's public key. (#60)\n\n* 0.2.12 — pki.ct.verifySct verifies a Signed Certificate Timestamp's signature against a Certificate Transparency log's public key.\n\npki.ct grows from parsing an SCT list to verifying an SCT. pki.ct.verifySct(entry, sct, logPubli\n[…]\ne's own key -- which is not the log key the SCT names and would surface a logId mismatch.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.12 — pki.ct.verifySct verifies a Signed Certificate Timestamp's s…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T18:37:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ca8929e1291039eb156e072ece851519b730692",
          "body": "…verify -- front-ends over the certificate inspector, the linter, the PEM codecs, and RFC 5280 path validation. (#59)\n\n* 0.2.11 — The pki command-line tool gains inspect, lint, convert, and verify -- front-ends over the certificate inspector, the linter, the PEM codecs, and RFC 5280 path validation.\n[…]\n cannot parse. convert is no longer a looser validation path than the codecs it composes.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.11 — The pki command-line tool gains inspect, lint, convert, and …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T17:29:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "46c8b44f84dffa992737bc6d1540cd31216a88b0",
          "body": "…conformance findings against the RFC 5280 profile and a representative CA/Browser Forum TLS Baseline Requirements subset. (#58)\n\n* 0.2.10 — Certificate linting arrives as pki.lint -- graded, advisory conformance findings against the RFC 5280 profile and a representative CA/Browser Forum TLS Baselin\n[…]\nted as missing for the TLS profile rather than counted as present by raw byte inspection.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.10 — Certificate linting arrives as pki.lint -- graded, advisory …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T15:59:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "883c1ea1528adae8accd661473213e220451e53a",
          "body": "…eject paths, and close reachable branches across the tail format modules (#57)\n\nAdds a direct engine test for lib/byte-reader (the bounded big-endian cursor\nunder the length-prefixed wire formats), taking its branch coverage to 100%, and\na direct conformance test for validator-cose's COSE_Key rejec\n[…]\np,\nschema-tsp, schema-trust, jose, shbs, hpke, and merkle; every remaining\nuncovered branch in those modules is a documented unreachable-invariant\nfail-closed default. No library change -- tests only.",
          "is_bot": false,
          "headline": "test: cover the byte-reader engine primitive and the validator-cose r…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T11:10:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e19c0ca29fc9c78181d857a0f9998a03f2e48939",
          "body": "…tures, accepting a certificate only when both its post-quantum and traditional components verify. (#56)\n\n* 0.2.9 — Certification-path validation verifies composite ML-DSA signatures, accepting a certificate only when both its post-quantum and traditional components verify.\n\npki.path.validate now ve\n[…]\nypto/data error, and apply the composite keyUsage gate to an OCSP delegate responder cert\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.9 — Certification-path validation verifies composite ML-DSA signa…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T10:47:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd1689d18987143778287f964b70bd70bb221099",
          "body": "…instead of deferring the failure to first use. (#55)\n\n* 0.2.8 — pki.webcrypto rejects an AES key of invalid length at import instead of deferring the failure to first use.\n\nimportKey now enforces the W3C WebCrypto rule that a raw or JWK symmetric AES key must be 128, 192, or 256 bits. A non-conform\n[…]\nuating now.\n\nAlso adds the maximum-branch-coverage discipline to the contributor guide.\n@\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.8 — pki.webcrypto rejects an AES key of invalid length at import …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T08:32:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b0a19422c9896bd3a60af77ca5e3a7d69f34859",
          "body": "…th its algorithm, and reports every cipher fault as a typed error. (#54)\n\n* 0.2.7 — pki.webcrypto rejects an imported key whose type disagrees with its algorithm, and reports every cipher fault as a typed error.\n\nTwo hardening fixes to the pki.webcrypto SubtleCrypto surface. First, importKey now de\n[…]\nined.\nThis drives the swallow body explicitly rather than relying on an incidental hit.\n@\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.7 — pki.webcrypto rejects an imported key whose type disagrees wi…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T07:28:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8331ff72a4568266ffc294dccfcab11300e51a58",
          "body": "…64 fully-specified COSE algorithms, and hardens credential-key conformance. (#53)\n\n* 0.2.6 — WebAuthn attestation verification covers Ed448 and the RFC 9864 fully-specified COSE algorithms, and hardens credential-key conformance.\n\npki.webauthn now evaluates a WebAuthn credential public key and atte\n[…]\nthe affected single-line try/catch swallows so their catch body carries its own coverage.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.6 — WebAuthn attestation verification covers Ed448 and the RFC 98…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T05:41:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3aea8fbc7d75cc456506e505522017d3ec9e2322",
          "body": "… as pki.webauthn.\n\npki.webauthn evaluates a W3C WebAuthn (Level 3) / passkey attestation offline, in pure JavaScript: it parses the attestation object and authenticatorData, decodes the COSE credential public key, and cryptographically verifies each defined attestation-statement format -- packed, t\n[…]\nning the returned trust path to a trusted root -- and resolving a root from an authenticator's aaguid via the FIDO Metadata Service -- is the caller's step via pki.path.validate against roots it pins.",
          "is_bot": false,
          "headline": "0.2.5 — WebAuthn / passkey attestation verification joins the toolkit…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-13T00:34:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c84e24f2fee3517c3ca020231f5fb9030e3c7af3",
          "body": "…i.inspect. (#51)\n\n* 0.2.4 — Human-readable certificate inspection joins the toolkit as pki.inspect.\n\npki.inspect renders a certificate as a familiar OpenSSL-style text report -- the pure-JavaScript equivalent of openssl x509 -text -- so an operator can ingest a PEM or DER blob and read exactly what\n[…]\n (a CPS URI is an IA5String) as text, otherwise a hex\ndump -- keyed by its qualifier OID.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.4 — Human-readable certificate inspection joins the toolkit as pk…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-12T18:32:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b6025521091497c9b8c9b290a2f84f986c1f243",
          "body": "….sigstore. (#50)\n\n* 0.2.3 — Offline Sigstore bundle verification joins the toolkit as pki.sigstore.\n\npki.sigstore verifies a Sigstore bundle -- the exact artifact npm publish --provenance produces and the npm registry serves at its attestations API -- offline and with zero runtime dependencies, whe\n[…]\ne, closing a certificate- or\npayload-substitution gap on a partially-populated log entry.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.3 — Offline Sigstore bundle verification joins the toolkit as pki…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-12T07:53:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2022dce745e5105aa4ef029560d09a68ed8d1b2",
          "body": "…pki.hpke. (#49)\n\n* 0.2.2 — Hybrid Public Key Encryption (RFC 9180) joins the toolkit as pki.hpke.\n\npki.hpke implements the RFC 9180 HPKE base construction -- the standard encrypt-to-a-public-key primitive behind TLS Encrypted Client Hello, MLS, and Oblivious HTTP. It turns a recipient KEM public ke\n[…]\n, or NaN reports hpke/export-length rather\nthan silently returning empty or throwing raw.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.2 — Hybrid Public Key Encryption (RFC 9180) joins the toolkit as …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-12T03:32:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1446b414552eea74bb1cbd6dd5de020886102870",
          "body": "…e toolkit as pki.shbs. (#48)\n\n* 0.2.1 — Stateful hash-based signature verification (HSS/LMS) joins the toolkit as pki.shbs.\n\npki.shbs verifies HSS/LMS signatures -- the stateful hash-based scheme of RFC 8554, carried in X.509 by RFC 9802 and in CMS by RFC 9708, profiled by NIST SP 800-208 and manda\n[…]\nr a matching typecode still throws\n(bounds-before-slice); pinned by a conformance vector.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.1 — Stateful hash-based signature verification (HSS/LMS) joins th…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-12T01:47:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7274c6c48d08211d902b620666836c9e27bc8262",
          "body": "… input-guard layer. (#47)\n\n* 0.2.0 — Trust-store ingestion, sharded-CRL revocation, and a hardened input-guard layer.\n\npki.trust ingests the Mozilla/NSS certdata.txt root store and the CCADB certificate-records CSV into constraint-carrying trust anchors: each anchor keeps the per-purpose trust bits\n[…]\ned\n(trust/bad-csv), so a new vocabulary entry surfaces instead of being\nsilently skipped.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.2.0 — Trust-store ingestion, sharded-CRL revocation, and a hardened…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-11T23:25:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c65599b955330832e68aaccad40deff774e1c0a6",
          "body": "…idation. (#46)\n\n* 0.1.32 — OCSP-backed revocation checking joins certification-path validation.\n\npki.path.ocspChecker is the OCSP counterpart to pki.path.crlChecker: it plugs into the same revocationChecker hook on pki.path.validate, so an operator can back path revocation with pre-fetched OCSP res\n[…]\nt, the same\ninheritance the path validator applies before a certificate signature verify.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.32 — OCSP-backed revocation checking joins certification-path val…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-11T18:48:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7a21db3441f065ffa12ed3f980229db257a1e0a1",
          "body": "…e. (#45)\n\n* 0.1.31 — The DER format cohort and the JOSE surface graduate to stable.\n\nA large batch of primitives that have been marked experimental while their return shapes settled are promoted to stable, so they are now covered by the stability contract and the LTS support window -- their signatu\n[…]\nall sites all wire non-negative\nbounds, so the authoring guard is otherwise unreachable).\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.31 — The DER format cohort and the JOSE surface graduate to stabl…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-11T16:08:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "401652d364bdf9467815a6f7e9c1565af39277c3",
          "body": "…daries. (#44)\n\n* 0.1.30 — Fail-closed hardening of the byte-input and text-decode boundaries.\n\nTwo classes of input boundary are tightened. The EST transfer and multipart decoders now enforce their size cap on the raw byte length BEFORE the payload is decoded to a string: previously an oversized bo\n[…]\ns. RED vector: a 4xx/5xx with\na detached body yields est/http-error, not a raw TypeError.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.30 — Fail-closed hardening of the byte-input and text-decode boun…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-11T07:36:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f6529f8384ce36f2733576f7c54bf138c8703dbb",
          "body": "… error across the CBOR and WebCrypto input paths. (#43)\n\n* 0.1.29 — A detached-backed BufferSource now fails closed with a typed error across the CBOR and WebCrypto input paths.\n\nA TypedArray whose backing ArrayBuffer has been transferred or structuredClone'd away is detached: reading its bytes thr\n[…]\nCHANGELOG restated to the full input-surface\nscope and the WebCrypto fail-open it closes.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.29 — A detached-backed BufferSource now fails closed with a typed…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-11T05:57:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "971a77604077693b8521bcb10057c9b6113053fa",
          "body": "…pki.merkle. (#37)\n\n* 0.1.28 — Merkle transparency proof verification joins the toolkit as pki.merkle.\n\npki.merkle is the RFC 6962 / RFC 9162 Merkle-tree proof-verification core -- the primitive a static Certificate Transparency log client, a Merkle Tree Certificates relying party, and a sigstore / \n[…]\nptyRootHash when newSize=0, with a\nRED vector proving a mismatched newRoot returns false.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.28 — Merkle transparency proof verification joins the toolkit as …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-11T04:46:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e7e4f212b71e8d331893622e071a27a73a16d6b3",
          "body": "…bor. (#36)\n\n* 0.1.27 — A strict deterministic-CBOR codec joins the toolkit as pki.cbor.\n\npki.cbor is an in-house RFC 8949 Concise Binary Object Representation decoder restricted to the Core Deterministic Encoding profile (RFC 8949 section 4.2), the binary sibling of pki.asn1. Like the DER codec it \n[…]\nith cbor/too-many-items, so a high-fanout\ncontainer fails closed instead of OOM-crashing.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.27 — A strict deterministic-CBOR codec joins the toolkit as pki.c…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-11T01:49:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6dc1baab11513f1b47ead4ef587d16a679aae22a",
          "body": "…ge. (#35)\n\nA coverage script measures statement and branch coverage across the full test suite with c8, a dev-only tool that does not affect the published package (runtime dependencies remain zero). The README badge row now carries the project's OpenSSF Best Practices badge. There are no library or\n[…]\nly — the published package still declares zero runtime dependencies.\n\nChanged:\n  - The README badge row now includes the OpenSSF Best Practices badge.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.26 — Test-coverage measurement and the OpenSSF Best Practices bad…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-10T23:31:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e1151f81f8a473e18f36bcab6e00653b3036993e",
          "body": "npm run coverage runs the full test suite under c8 and reports statement,\nbranch, function, and line coverage (currently 99.09% statements, 88.75%\nbranches, 98.03% functions over lib/ + index.js). Dev-only devDependency;\nthe published tarball is unchanged (dependencies stays empty).",
          "is_bot": false,
          "headline": "Add c8 statement/branch coverage measurement (#33)",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-10T19:58:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9bebe246a0fcae66e95f213c25b77d67e6fb5b0",
          "body": "… RFC 7515 JOSE surface. (#32)\n\n* 0.1.25 — ACME joins the toolkit: an RFC 8555 message layer over a new RFC 7515 JOSE surface.\n\npki.jose is a from-scratch JOSE layer: a strict base64url codec (padding, non-alphabet, and non-canonical trailing bits all rejected), a bounded JSON reader that refuses du\n[…]\nclient using this helper after finalization\nmust not treat that as an illegal transition.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.25 — ACME joins the toolkit: an RFC 8555 message layer over a new…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-10T18:28:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0095851918c405a67a39efafc8c7554e5dc9c563",
          "body": "…s parser and an RFC 7030 client-codec surface. (#31)\n\n* 0.1.24 — EST enrollment joins the toolkit: the RFC 8951 CSR-attributes parser and an RFC 7030 client-codec surface.\n\npki.schema.csrattrs parses the EST CSR Attributes wire format (CsrAttrs, RFC 8951 section 3.5, the syntax that replaced the br\n[…]\nw, per RFC 8951 (ignore\nwhat you don't recognize), instead of failing the whole response.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.24 — EST enrollment joins the toolkit: the RFC 8951 CSR-attribute…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-10T12:56:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "640b92e0beda447ed8d78dd54c07720acec8eedc",
          "body": "…, clarify the HMAC-verify length gate (#30)\n\nThe OpenSSF Scorecard SARIF output carries no aggregate score, so the\nfail-closed threshold gate could never extract one and errored on every run.\nThe workflow now emits a JSON results file alongside the SARIF (the SARIF still\nfeeds the Security tab and \n[…]\nic-length gate before the\nconstant-time `timingSafeEqual`, and the clearer name keeps a static analyzer\nfrom misreading the length comparison as a non-constant-time secret compare. No\nbehavior change.",
          "is_bot": false,
          "headline": "Fix the Scorecard threshold gate, ship the README into the docs image…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-10T06:49:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a6fd19d3c77163f0f4b26579927b793643cbb128",
          "body": "… RFC 5083 AuthEnvelopedData, and RFC 9629 KEM recipients (ML-KEM ready) — plus a toolkit-wide hardening pass. (#29)\n\n* 0.1.23 — CMS grows authenticated content: RFC 5652 AuthenticatedData, RFC 5083 AuthEnvelopedData, and RFC 9629 KEM recipients (ML-KEM ready) — plus a toolkit-wide hardening pass.\n\n\n[…]\nand the README\ngains CI / CodeQL / fuzzing / OpenSSF Scorecard / SLSA build-level badges.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.23 — CMS grows authenticated content: RFC 5652 AuthenticatedData,…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-10T06:15:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b575d6ed8f28a20abe64d08ecad56141c3d4d5b",
          "body": "…oins the schema family. (#28)\n\n* 0.1.22 — An RFC 5035 / RFC 8551 S/MIME ESS signed-attribute decoder joins the schema family.\n\npki.schema.smime decodes the S/MIME Enhanced Security Services signed-attribute values a CMS SignerInfo carries. parseSigningCertificate and parseSigningCertificateV2 decod\n[…]\nrSerial itself no longer constrains\nthe issuer beyond the shared GeneralNames validation.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.22 — An RFC 5035 / RFC 8551 S/MIME ESS signed-attribute decoder j…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-09T18:46:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d3b587cda3adc5e8ec8744ad63c9b97bb80c433",
          "body": "…and the post-quantum / EdDSA parameters-absent rule is enforced across every format. (#27)\n\n* 0.1.21 — SLH-DSA signatures verify in certification-path validation, and the post-quantum / EdDSA parameters-absent rule is enforced across every format.\n\npki.path.validate now verifies SLH-DSA-signed cert\n[…]\nDSA AlgorithmIdentifier\nwith a stray explicit NULL was surfaced raw rather than rejected.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.21 — SLH-DSA signatures verify in certification-path validation, …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-09T15:11:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "661e3cd3e2dba6a1ad1313233e7fcad0f12791dd",
          "body": "…he toolkit. (#26)\n\n* 0.1.20 — An RFC 6962 Certificate Transparency SCT-list parser joins the toolkit.\n\npki.ct.parseSctList decodes the Signed Certificate Timestamp list a certificate or OCSP response carries in its SCT extension. The payload is TLS presentation language — positional, tag-less, big-\n[…]\n parses while an oversized inner OCTET STRING is still\nrefused before the list is walked.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.20 — An RFC 6962 Certificate Transparency SCT-list parser joins t…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-09T14:16:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c9b9d54a141ceadf1e2324f3aa9d15f852a681d3",
          "body": "…oins the pki.schema family. (#25)\n\n* 0.1.19 — An RFC 9810 Certificate Management Protocol message parser joins the pki.schema family.\n\npki.schema.cmp.parse decodes a CMP PKIMessage — the protected transport envelope certificate enrollment, revocation, confirmation, and support exchanges ride — into\n[…]\nno 2 is rejected (RFC 9810 §5.3.13, §7); the deprecated cAKeyUpdAnnV2 form\n  stays legal.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.19 — An RFC 9810 Certificate Management Protocol message parser j…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-09T11:20:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27967cb748914eed537b096dd4f162c8c0b836b4",
          "body": "…family. (#24)\n\n* 0.1.18 — An RFC 7292 PKCS#12 (PFX) store parser joins the pki.schema family.\n\npki.schema.pkcs12.parse decodes a .p12 / .pfx key-and-certificate store — the container OpenSSL, Windows CAPI, macOS Keychain, and NSS exchange — into its bags: private keys delegated to the PKCS#8 parser\n[…]\nented raw-Buffer contract. A privacy safe with absent\nencryptedContent now rejects typed.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.18 — An RFC 7292 PKCS#12 (PFX) store parser joins the pki.schema …",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-09T03:55:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9278970a8a957440f691bc9ceac803a160ba871c",
          "body": "….schema family. (#23)\n\n* Drive the @status lifecycle and add Semgrep / Snyk / dependency review\n\nAdd a release gate (scripts/check-status-lifecycle.js) that drives the\nexperimental -> stable -> deprecated lifecycle so a primitive cannot sit\nexperimental by inertia. It fails when a primitive has run\n[…]\n encryptedKey EnvelopedData must\nactually carry the encrypted key: CMS permits a detached EnvelopedData with no\nencryptedContent, but a proof with no key material to verify or archive is now\nrejected.",
          "is_bot": false,
          "headline": "0.1.17 — An RFC 4211 certificate-request-message parser joins the pki…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-07T05:29:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2061621017bec47b8d1d1055316b7660e90a2de",
          "body": "…ection 6, as a pure re-entrant algorithm. (#21)\n\n* 0.1.16 — Certification path validation joins the toolkit — RFC 5280 section 6, as a pure re-entrant algorithm.\n\npki.path.validate runs the RFC 5280 section 6.1 certification-path validation state machine over an ordered path and a trust anchor: sig\n[…]\nking CRL (and passing under\nsoftFail). Such a CRL is now treated as unusable and skipped.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.16 — Certification path validation joins the toolkit — RFC 5280 s…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-06T19:48:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e59f6c0d377c21e96c5ebfacc957456fed957588",
          "body": "…ry documentation example is now executed as a test. (#20)\n\n* 0.1.15 — CMS EnvelopedData and EncryptedData join the parser, and every documentation example is now executed as a test.\n\npki.schema.cms now structurally decodes EnvelopedData (RFC 5652 §6, including all five RecipientInfo kinds — key tra\n[…]\nand KEKIdentifier now share one schema factory so their OPTIONAL handling cannot diverge.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.15 — CMS EnvelopedData and EncryptedData join the parser, and eve…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-06T08:32:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "16ecf35d6864c4420e69faf25dee742edd3cb5b4",
          "body": "…a family. (#19)\n\n* 0.1.14 — An RFC 5755 attribute-certificate parser joins the pki.schema family.\n\npki.schema.attrcert parses X.509 attribute certificates from DER or PEM. An attribute certificate binds a holder to a set of privilege attributes (role, group, clearance) without carrying a public key\n[…]\nthan surfacing as an unnamed attribute a\nconsumer cannot distinguish from an unknown one.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.14 — An RFC 5755 attribute-certificate parser joins the pki.schem…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-06T02:34:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b314742462983e59f52f8c2063cd39cfda150e3",
          "body": "* 0.1.13 — An RFC 3161 timestamp parser joins the pki.schema family.\n\npki.schema.tsp parses RFC 3161 Time-Stamp Protocol structures from DER or PEM. parse decodes a TimeStampResp — the message a client receives from a TSA — and enforces the status-to-token coupling: a granted response carries a time\n[…]\nn would reject the object as bad input. The example now\nreads the decoded token directly.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.13 — An RFC 3161 timestamp parser joins the pki.schema family. (#18)",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-06T00:04:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b3a4594a121c3dc02930584345a9eea5454f6ac3",
          "body": "…elve FIPS 205 parameter sets. (#17)\n\nThe SLH-DSA (FIPS 205) signature-algorithm OIDs under the NIST sigAlgs arc (2.16.840.1.101.3.4.3) were incomplete and two were mislabelled: id-slh-dsa-shake-128s and id-slh-dsa-shake-256s were registered at arcs .24 and .27, which are actually id-slh-dsa-sha2-25\n[…]\nously-absent nine sets now resolve as well. WebCrypto SLH-DSA sign/verify was unaffected — it selects by algorithm name, not through the OID registry.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.12 — SLH-DSA object identifiers corrected and completed to all tw…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-05T20:46:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b09e2aceb161bd256c934dd9bfb58cfbc9fa0b2",
          "body": "…ily. (#16)\n\n* 0.1.11 — An OCSP request and response parser joins the pki.schema family.\n\npki.schema.ocsp parses OCSP requests and responses (RFC 6960) from DER or PEM into structured objects. A response is a two-stage OID-dispatch: OCSPResponse reads its ENUMERATED status and, when the responseType\n[…]\nept raw-with-tag.)\n\nConformance vectors drive a non-SEQUENCE certs element on both paths.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.11 — An OCSP request and response parser joins the pki.schema fam…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-05T20:09:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "281c68266f18e78f67b05779bb5e25d69d5d66e4",
          "body": "…e-guided fuzzing now runs in CI. (#14)\n\n* 0.1.10 — A CMS SignedData parser joins the pki.schema family; coverage-guided fuzzing now runs in CI.\n\npki.schema.cms parses CMS SignedData (RFC 5652) — the §3 ContentInfo envelope plus the §5 SignedData body — from DER or PEM into a structured object: the \n[…]\n the file-level\nconformance guard now also pins the cms/content-type-mismatch error code.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.10 — A CMS SignedData parser joins the pki.schema family; coverag…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-05T18:32:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "697c69d4ca0e6665f371c7408f4a2e1f81e16a6e",
          "body": "* 0.1.9 — A PKCS#8 private-key parser joins the pki.schema family.\n\npki.schema.pkcs8 parses PKCS#8 private keys — plaintext PrivateKeyInfo (RFC 5208 §5) / OneAsymmetricKey (RFC 5958 §2) and, recognized-but-not-decrypted, EncryptedPrivateKeyInfo (RFC 5958 §3). It turns DER or PEM into a structured ob\n[…]\neturn gated on a validated encryption-\nalgorithm discriminator once the PBES layer lands.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.9 — A PKCS#8 private-key parser joins the pki.schema family. (#13)",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-05T08:36:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "df7dd8cf3daf1fba28d9ff471f5a63770c248f6a",
          "body": "* Add release.js push-fix subcommand for fixing an open release PR\n\npush-fix lands a review/CI fix on the already-open release PR in one\nstep: gitleaks scan, a NEW signed commit (never --amend, so the head\nmoves and the review-thread + Codex gates re-check the new revision),\npush, and a `@codex revi\n[…]\ne commit on any failure, so the operator\ncorrects the cause and re-runs push-fix cleanly.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "Add release.js push-fix subcommand for fixing an open release PR (#12)",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-05T07:09:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55152ab3dd1aeea75d92f9a6749377e16ee8ae62",
          "body": "…amily. (#11)\n\n* 0.1.8 — A PKCS#10 certification-request parser joins the pki.schema family.\n\npki.schema.csr parses PKCS#10 certification requests (RFC 2986) into a structured object — version, subject distinguished name, subject public-key info, the requested attributes, and the signature over the \n[…]\nC.TIME.ms diagnostic label ended\nin \".ms\", which package URL-string scanners misread as a domain; the\nfull word clears that false positive.\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.8 — A PKCS#10 certification-request parser joins the pki.schema f…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-05T06:26:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9910e05a0cd29572df6423830ba724c1d7d90694",
          "body": "… X.509 parser, a new CRL parser, and a detect-and-route orchestrator. (#10)\n\n* 0.1.7 — A unified pki.schema family: the structure-schema engine, the X.509 parser, a new CRL parser, and a detect-and-route orchestrator.\n\nThe schema engine and the per-format parsers are reorganized under one pki.schem\n[…]\n pemDecode / pemEncode) for each format, so the\ndetectors no longer leak onto pki.schema.x509 / pki.schema.crl or the\ntracked API snapshot.\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.7 — A unified pki.schema family: the structure-schema engine, the…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-05T03:51:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7914fc3eabb5a64ca482599e8c135a1c056dbbb1",
          "body": "… is rebuilt on it. (#9)\n\n* 0.1.6 — A declarative ASN.1 structure-schema engine; the X.509 parser is rebuilt on it.\n\nNew: pki.asn1.schema, a declarative structure-schema engine — a schema is plain data (combinators plus value leaves) and walk() interprets it against a decoded DER node, enforcing sha\n[…]\n a first-class optional ANY field via\nthe schema.optional whenAny recognizer, so it is consumed by the field walk\nrather than read past it.\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.6 — A declarative ASN.1 structure-schema engine; the X.509 parser…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T22:45:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e46b9e730d1f6deedd843090cbb62cd41985422",
          "body": "…y-chain hardening. (#8)\n\nThe example wiki container's healthcheck now probes the configured WIKI_PORT instead of a hardcoded port, so overriding the port keeps a working healthcheck. Alongside it, the release tooling is hardened: the gitleaks secret-scanner binary is authenticated and checksum-veri\n[…]\nshed one.\n  - The workflow-security audit re-runs when its own configuration file changes, so an edit that would suppress a finding is itself audited.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.5 — Container healthcheck honors WIKI_PORT; release-tooling suppl…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T20:31:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8984cc04d1e387fd8beb12fded421b0226c3794f",
          "body": "…escriptor registry. (#7)\n\nInternal refactor with no behavior or API change: the DER codec's universal-type table — each type's tag and whether DER requires it encoded primitive or constructed — is now defined once in a descriptor registry, and the tag constants plus the decoder's structural form ch\n[…]\nis an internal refactor: the public surface and every decode/encode result are unchanged, and it lays the groundwork for schema-driven format parsers.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.4 — The ASN.1 codec's universal-type metadata moves to a single d…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T19:57:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bef4643ad5b0f4eda8d9380a6875e67040319231",
          "body": "…aterial. (#6)\n\npki.webcrypto.subtle.importKey now derives an EC key's named curve from the imported key material and enforces it, closing a case where a mismatched or unsupported curve was accepted — the curve is a property of the key, not the caller's request.\n\nSecurity:\n  - pki.webcrypto.subtle.i\n[…]\n); generateKey already enforced this, and import now matches it. The raw-key format was already validated against its declared curve and is unchanged.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.3 — WebCrypto EC key import validates the curve against the key m…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T19:29:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "287060bfcb0c288247373f0d05342ec042c956ad",
          "body": "… and X.509 parser. (#5)\n\n* 0.1.2 — Fail-closed hardening across the DER codec, WebCrypto engine, and X.509 parser.\n\nA correctness and security release: the ASN.1/DER decoder gains per-value bounds that close a remotely-triggerable decode denial-of-service, the WebCrypto engine closes two key-usage-\n[…]\nosed\n  with x509/bad-extensions.\n\nFound by a proactive parse audit, not a reported issue.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>\n\n---------\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.2 — Fail-closed hardening across the DER codec, WebCrypto engine,…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T19:09:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "076ad0655e8fc3d2df56fc6b4ba8400415765d9e",
          "body": "The initial npm-published release of @blamejs/pki: the strict, fail-closed ASN.1/DER codec, the OID registry, X.509 certificate parsing, and the PQC-first WebCrypto engine — on a zero-runtime-dependency, native-first base, published with SLSA provenance and a signed release.\n\nChanged:\n  - First rele\n[…]\nures alongside the full classical set) — now available on npm with a SLSA provenance attestation, and served as the pkijs.com documentation container.\n\nSigned-off-by: dotCooCoo <RobertLeeLW@gmail.com>",
          "is_bot": false,
          "headline": "0.1.1 — First published release of the 0.1.x foundation. (#4)",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T12:47:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "099fbaffd9f8a7410aca4918d9930b465ecf0e90",
          "body": "The docs home page still read \"everything is vendored and auditable\" — a\nleftover from before the switch to native-first cryptography. The toolkit\nvendors nothing; the crypto runs on Node's built-in node:crypto (classical\nand FIPS post-quantum). Correct the intro so the shipped docs site matches\nthe toolkit's actual posture.",
          "is_bot": false,
          "headline": "Fix wiki home intro: native-first crypto, not \"vendored\" (#3)",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T12:23:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88c26c4eeadea63ddf0dce184830db05c70905be",
          "body": "Build the wiki reference site into a deployable container — the blamejs\npattern adapted to this toolkit's stateless, zero-dependency docs site:\n\n- examples/wiki/Dockerfile — single-stage, digest-pinned Chainguard (Wolfi)\n  node base, nonroot, EXPOSE 3009, HEALTHCHECK /healthz. The site generates\n  e\n[…]\nDockerfile lint gate.\n- codebase-patterns: a wiki-port-agreement detector so the Dockerfile port\n  and the release smoke can never silently drift.\n- release.js publish now watches the container build.",
          "is_bot": false,
          "headline": "Add the pkijs.com docs container (port 3009) + release pipeline (#2)",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T12:10:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a90dc79ad33eebb06cc00cb40caa484420930cc4",
          "body": "…le-tolerant (#1)\n\nThe initial CI run failed on setup issues, not code:\n\n- Add package-lock.json (root, fuzz, examples/wiki) so CI's `npm ci` resolves\n  the dev toolchain instead of erroring with EUSAGE.\n- Add .github/zizmor.yml suppressing the capability-driven cache-poisoning\n  finding on actions/\n[…]\noss-check for ML-DSA now skips when the oracle's\n  OpenSSL predates 3.5 (CI runners and Alpine ship 3.0–3.3, which have no\n  ML-DSA); the toolkit's own tests already prove ML-DSA sign/verify natively.",
          "is_bot": false,
          "headline": "Fix CI: commit lockfiles, add zizmor config, make ML-DSA interop orac…",
          "author_name": ".CooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T11:56:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8f87f32d0813a11565c5ae112d9c378c9a65e0b3",
          "body": "…sing, and a PQC-first WebCrypto engine\n\n@blamejs/pki is a pure-JavaScript PKI toolkit that owns its stack — zero npm\nruntime dependencies, native-first cryptography, security-on by default.\n\nThis first cut ships:\n\n- pki.asn1 — a strict, fail-closed DER decoder and canonical encoder (X.690):\n  a nav\n[…]\nntum via the platform OpenSSL); nothing is vendored. See ROADMAP.md\nfor the certificate/CMS/OCSP/enrollment surface that rides this core, and\nSECURITY.md + THREAT-MODEL.md for the fail-closed posture.",
          "is_bot": false,
          "headline": "0.1.0 — Initial foundation: strict DER codec, OID registry, X.509 par…",
          "author_name": "dotCooCoo",
          "author_login": "dotCooCoo",
          "committed_at": "2026-07-04T11:42:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 75,
      "commits_last_year": 83,
      "latest_release_at": "2026-07-18T08:44:15Z",
      "latest_release_tag": "v0.3.8",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 0.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@blamejs/pki",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "pki",
            "x509",
            "asn1",
            "der",
            "oid",
            "cms",
            "pkcs7",
            "ocsp",
            "crl",
            "csr",
            "pkcs10",
            "pkcs8",
            "pkcs12",
            "tsp",
            "timestamp",
            "certificate",
            "post-quantum",
            "pqc",
            "ml-dsa",
            "ml-kem",
            "slh-dsa",
            "composite-signatures",
            "zero-dependencies",
            "vendored-dependencies",
            "pure-javascript",
            "supply-chain",
            "security-first",
            "owns-its-stack"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@blamejs/pki",
          "is_deprecated": false,
          "latest_version": "0.3.8",
          "repository_url": "https://github.com/blamejs/pki",
          "versions_count": 75,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 11699,
          "first_published_at": "2026-07-04T12:49:29.438000Z",
          "latest_published_at": "2026-07-18T08:44:22.145000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 7
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 265613,
      "source_files_sampled": 270,
      "oversized_source_files": 11,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "fuzz/package.json",
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 207,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@babel/code-frame",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/compat-data",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/core",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/generator",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-compilation-targets",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-globals",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-module-imports",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-module-transforms",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-option",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helpers",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/template",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/traverse",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@bcoe/v8-coverage",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/eslint-utils",
            "direct": false,
            "version": "4.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/regexpp",
            "direct": false,
            "version": "4.12.2",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-array",
            "direct": false,
            "version": "0.23.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-helpers",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/core",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/object-schema",
            "direct": false,
            "version": "3.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/plugin-kit",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/core",
            "direct": false,
            "version": "0.19.2",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/node",
            "direct": false,
            "version": "0.16.8",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/types",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/module-importer",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/retry",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@isaacs/fs-minipass",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@istanbuljs/schema",
            "direct": false,
            "version": "0.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@jazzer.js/bug-detectors",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jazzer.js/core",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jazzer.js/fuzzer",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jazzer.js/hooking",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jazzer.js/instrumentor",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/gen-mapping",
            "direct": false,
            "version": "0.3.13",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/remapping",
            "direct": false,
            "version": "2.3.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@types/esrecurse",
            "direct": false,
            "version": "4.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/istanbul-lib-coverage",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "@types/json-schema",
            "direct": false,
            "version": "7.0.15",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.17.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-jsx",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "6.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "append-transform",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "baseline-browser-mapping",
            "direct": false,
            "version": "2.10.41",
            "ecosystem": "npm"
          },
          {
            "name": "bindings",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "browserslist",
            "direct": false,
            "version": "4.28.4",
            "ecosystem": "npm"
          },
          {
            "name": "buffer-from",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "c8",
            "direct": false,
            "version": "11.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "caniuse-lite",
            "direct": false,
            "version": "1.0.30001800",
            "ecosystem": "npm"
          },
          {
            "name": "chownr",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "cmake-js",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "deep-extend",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "deep-is",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "default-require-extensions",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "electron-to-chromium",
            "direct": false,
            "version": "1.5.387",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escalade",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint",
            "direct": false,
            "version": "10.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-scope",
            "direct": false,
            "version": "9.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "espree",
            "direct": false,
            "version": "11.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "esquery",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "esrecurse",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "esutils",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-json-stable-stringify",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "file-entry-cache",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "file-uri-to-path",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flat-cache",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "flatted",
            "direct": false,
            "version": "3.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "foreground-child",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "fs-extra",
            "direct": false,
            "version": "11.3.6",
            "ecosystem": "npm"
          },
          {
            "name": "gensync",
            "direct": false,
            "version": "1.0.0-beta.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-caller-file",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "13.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "imurmurhash",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "ini",
            "direct": false,
            "version": "1.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "is-extglob",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-glob",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-coverage",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-hook",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-instrument",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-report",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-reports",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "jsesc",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-buffer",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-stable-stringify-without-jsonify",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "json5",
            "direct": false,
            "version": "2.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "jsonfile",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "keyv",
            "direct": false,
            "version": "4.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "levn",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "11.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "5.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "make-dir",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "minimist",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "minipass",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "minizlib",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "natural-compare",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-addon-api",
            "direct": false,
            "version": "8.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-api-headers",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-releases",
            "direct": false,
            "version": "2.0.50",
            "ecosystem": "npm"
          },
          {
            "name": "optionator",
            "direct": false,
            "version": "0.9.4",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-scurry",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "prelude-ls",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "proper-lockfile",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "punycode",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "rc",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "require-directory",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "retry",
            "direct": false,
            "version": "0.12.0",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "6.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.5",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-support",
            "direct": false,
            "version": "0.5.21",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-bom",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-json-comments",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tar",
            "direct": false,
            "version": "7.5.19",
            "ecosystem": "npm"
          },
          {
            "name": "test-exclude",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "tmp",
            "direct": false,
            "version": "0.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "type-check",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "universalify",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "update-browserslist-db",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js",
            "direct": false,
            "version": "4.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "url-join",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "v8-to-istanbul",
            "direct": false,
            "version": "9.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "word-wrap",
            "direct": false,
            "version": "1.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "y18n",
            "direct": false,
            "version": "5.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "yallist",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "yallist",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "17.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "yocto-queue",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 207,
        "direct_count": 0,
        "indirect_count": 207
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 7,
        "merged_prs": 82,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 8
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "dotCooCoo",
          "commits": 83,
          "avatar_url": "https://avatars.githubusercontent.com/u/1206598?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "actions-lint.yml",
        "cflite_batch.yml",
        "cflite_pr.yml",
        "ci.yml",
        "codeql.yml",
        "dependency-review.yml",
        "npm-publish.yml",
        "release-container.yml",
        "scorecard.yml",
        "semgrep.yml",
        "snyk.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        "eslint.config.mjs"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 4,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 7,
            "reason": "badge detected: Silver",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 9,
            "reason": "dependency not pinned by hash detected -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 10,
            "reason": "5 out of the last 5 releases have a total of 10 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "29f9cd4e66a54e3ed64980ee80907dd5deefde0a",
        "ran_at": "2026-07-23T16:21:10Z",
        "aggregate_score": 7.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T08:14:09Z",
      "oldest_open_prs": [
        {
          "number": 90,
          "created_at": "2026-07-18T05:12:42Z",
          "last_comment_at": "2026-07-18T05:12:42Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 91,
          "created_at": "2026-07-18T05:12:45Z",
          "last_comment_at": "2026-07-18T05:12:46Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 92,
          "created_at": "2026-07-18T05:12:55Z",
          "last_comment_at": "2026-07-18T05:13:21Z",
          "last_comment_author": "socket-security"
        },
        {
          "number": 93,
          "created_at": "2026-07-18T05:12:57Z",
          "last_comment_at": "2026-07-18T05:12:57Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 94,
          "created_at": "2026-07-18T05:13:07Z",
          "last_comment_at": "2026-07-18T05:13:08Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 95,
          "created_at": "2026-07-18T05:13:16Z",
          "last_comment_at": "2026-07-18T05:13:17Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 97,
          "created_at": "2026-07-23T05:01:18Z",
          "last_comment_at": "2026-07-23T16:18:53Z",
          "last_comment_author": "dotCooCoo"
        }
      ],
      "last_merged_pr_at": "2026-07-18T08:41:29Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/blamejs/pki",
    "host": "github.com",
    "name": "pki",
    "owner": "blamejs"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 66,
      "inputs": {
        "security": 82,
        "vitality": 73,
        "community": 50,
        "governance": 49,
        "engineering": 80
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 73,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "commits_last_year": 83,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "83 commits in the last year",
                "points": 17.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 83
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "releases_count": 75,
              "latest_release_tag": "v0.3.8",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 0.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "75 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 75
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 10 signed artifacts.",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 50,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "packages": [
                "@blamejs/pki"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 11699
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "11,699 downloads/month across npm",
                "points": 54.2,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 11699,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 49,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "merged_prs": 82,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 8
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "82/90 decided PRs merged",
                "points": 34.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 82,
                      "decided": 90
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 38,
            "inputs": {
              "followers": 1,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "blamejs",
              "public_repos": 5,
              "account_age_days": 88
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1 followers of blamejs",
                "points": 2.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1,
                      "login": "blamejs"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "5 public repos, account ~0 yr old",
                "points": 6.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 5
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@blamejs/pki"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "75 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 75
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 80,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "11 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.mjs",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "asn1",
                "cryptography",
                "nodejs",
                "pki",
                "post-quantum",
                "webcrypto",
                "x509",
                "zero-dependencies"
              ],
              "has_wiki": false,
              "homepage": "https://pkijs.com",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://pkijs.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "8 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 82,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 7.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "badge detected: Silver",
                "points": 1.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 10 signed artifacts.",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 207 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 207
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 207,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 207,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 49,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "83 of 83 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 83,
                      "sampled": 83
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.mjs",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 83",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 83
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "dependency automation configured, none observed in the sampled commits",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "dependency_bot_config_only",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "primary_language": "JavaScript",
              "largest_source_bytes": 265613,
              "source_files_sampled": 270,
              "oversized_source_files": 11
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "JavaScript without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "JavaScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "11/270 source files over 60KB",
                "points": 52.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 270,
                      "oversized": 11
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T16:21:30.883038Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/blamejs/pki.svg",
  "full_name": "blamejs/pki",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}