3.4 KiB
3.4 KiB
security
Have-I-Been-Pwned checks, JWS, licensing, and OTP utilities.
Packages in security
15 packages.
| Package | Description |
|---|---|
@suaveplan/hibp |
Privacy-preserving Have I Been Pwned v3 client. Universal — works in Node, Bun, Deno, browsers, edge workers. The only required runtime primitive is fetch. |
@suaveplan/jws |
RFC 7515 JSON Web Signature (verify + sign). Pure TypeScript over Uint8Array + DataView plus the workspace crypto primitives (@suaveplan/crypto-rsa,… |
@suaveplan/license |
Compact, offline-verifiable, secp256k1-signed software-license-key format. Bit-for-bit wire-format compatible with upstream @suaveplan/license. runs unchange… |
@suaveplan/otp |
RFC 4226 (HOTP) + RFC 6238 (TOTP) + RFC 6287 (OCRA) + Google Authenticator Key URI Format + Base32 (RFC 4648 §6) + recovery codes + clock-drift detector — zero browser/Node deps |
@suaveplan/password-formats |
Universal import/export layer for common password-manager export formats. Parses Apple Passwords CSV, Bitwarden JSON, Chrome CSV, and KeePass XML into a normal… |
@suaveplan/password-generator |
Cryptographically-strong password and passphrase generator — char-class, pronounceable, EFF Diceware, and PIN modes with bias-free RNG, real entropy estimates,… |
@suaveplan/password-strength |
zxcvbn-style password strength estimator — pattern-matching + dictionary cracker model per Wheeler 2016. Universal; zero browser/Node/React deps. Re-implementa… |
@suaveplan/security-codes |
Detect and sanitise sensitive security-code leakage in strings. Handles API keys, JWTs, credit cards, GitHub tokens, Stripe keys, SSH keys, PEM blocks, AWS acc… |
@suaveplan/server-keys |
Operator-facing CLI bundle for the Suaveplan server-key lifecycle: 18 bins covering root + server keychain generation (including hierarchical `ChainedKeySigner… |
@suaveplan/slsa |
SLSA L1-L2 supply-chain security for Suaveplan. Generates and verifies in-toto / SLSA v1.0 provenance, CycloneDX 1.5 SBOMs, DSSE attestation envelopes, and RFC… |
@suaveplan/srp |
SRP-6a zero-knowledge password proof per RFC 5054 / RFC 2945. Universal — client and server roles in one package, bundled 2048-bit safe-prime group, optional 1… |
@suaveplan/tpm-struct |
Zero-runtime-dep TPM 2.0 attestation-structure parser and serialiser. Decodes TPMS_ATTEST (TCG TPM 2.0 Library Part 2 §10.12), decodes TPMT_PUBLIC (§12.2),… |
@suaveplan/vault |
Vault orchestration layer for the Vaulted password-manager ecosystem. Provides a drive-backed encrypted SQLite-style container, a strict locked ↔ unlocked… |
@suaveplan/vault-sync |
Domain-specific sync and conflict-resolution engine for the Vaulted password-manager ecosystem. Builds on @suaveplan/crdt and @suaveplan/diff (RFC 6902 JSO… |
@suaveplan/x509 |
RFC 5280 X.509 v3 certificate parser and certification-path validator. Universal (zero browser, Node, or React deps). Pure TypeScript over Uint8Array / `Data… |