@blamejs/pki 0.1.25 → 0.1.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -4,6 +4,18 @@ All notable changes to `@blamejs/pki` are documented here. The format
4
4
  follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this
5
5
  project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
6
6
 
7
+ ## v0.1.26 — 2026-07-10
8
+
9
+ Test-coverage measurement and the OpenSSF Best Practices badge.
10
+
11
+ ### Added
12
+
13
+ - npm run coverage measures statement and branch coverage over the full test suite with c8. It is a development dependency only — the published package still declares zero runtime dependencies.
14
+
15
+ ### Changed
16
+
17
+ - The README badge row now includes the OpenSSF Best Practices badge.
18
+
7
19
  ## v0.1.25 — 2026-07-10
8
20
 
9
21
  ACME joins the toolkit: an RFC 8555 message layer over a new RFC 7515 JOSE surface.
package/README.md CHANGED
@@ -19,6 +19,7 @@ No npm runtime dependencies. No TypeScript. No Web Crypto ceiling.
19
19
  [![CodeQL](https://github.com/blamejs/pki/actions/workflows/codeql.yml/badge.svg)](https://github.com/blamejs/pki/actions/workflows/codeql.yml)
20
20
  [![Fuzzing](https://github.com/blamejs/pki/actions/workflows/cflite_batch.yml/badge.svg)](https://github.com/blamejs/pki/actions/workflows/cflite_batch.yml)
21
21
  [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/blamejs/pki/badge)](https://scorecard.dev/viewer/?uri=github.com/blamejs/pki)
22
+ [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/13562/badge)](https://www.bestpractices.dev/projects/13562)
22
23
  [![SLSA 3](https://slsa.dev/images/gh-badge-level3.svg)](https://slsa.dev/spec/v1.0/levels#build-l3)
23
24
 
24
25
  [![Zero runtime deps](https://img.shields.io/badge/runtime%20deps-0-2ea043)](#security-posture)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@blamejs/pki",
3
- "version": "0.1.25",
3
+ "version": "0.1.26",
4
4
  "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
5
5
  "license": "Apache-2.0",
6
6
  "author": "blamejs contributors",
@@ -65,10 +65,12 @@
65
65
  "lint": "eslint --max-warnings 0 .",
66
66
  "fuzz": "npm ci --prefix fuzz && npx --prefix fuzz jazzer fuzz/asn1-der.fuzz.js -- -max_total_time=60",
67
67
  "gates": "node test/layer-0-primitives/codebase-patterns.test.js && node scripts/validate-source-comment-blocks.js && node scripts/check-api-snapshot.js",
68
+ "coverage": "c8 --include=lib/** --include=index.js --reporter=text-summary --reporter=lcov node test/smoke.js",
68
69
  "prepack": "node scripts/check-pack-against-gitignore.js",
69
70
  "check:vendor-currency": "node scripts/check-vendor-currency.js"
70
71
  },
71
72
  "devDependencies": {
73
+ "c8": "11.0.0",
72
74
  "esbuild": "0.28.1",
73
75
  "eslint": "10.3.0"
74
76
  }
package/sbom.cdx.json CHANGED
@@ -2,10 +2,10 @@
2
2
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
3
3
  "bomFormat": "CycloneDX",
4
4
  "specVersion": "1.5",
5
- "serialNumber": "urn:uuid:fa2f7437-a88e-47ad-959f-8d019edc06e0",
5
+ "serialNumber": "urn:uuid:51669f50-bf8f-4b65-8c89-e8fd503b0399",
6
6
  "version": 1,
7
7
  "metadata": {
8
- "timestamp": "2026-07-10T18:29:08.522Z",
8
+ "timestamp": "2026-07-10T23:32:35.928Z",
9
9
  "lifecycles": [
10
10
  {
11
11
  "phase": "build"
@@ -19,14 +19,14 @@
19
19
  }
20
20
  ],
21
21
  "component": {
22
- "bom-ref": "@blamejs/pki@0.1.25",
22
+ "bom-ref": "@blamejs/pki@0.1.26",
23
23
  "type": "application",
24
24
  "name": "pki",
25
- "version": "0.1.25",
25
+ "version": "0.1.26",
26
26
  "scope": "required",
27
27
  "author": "blamejs contributors",
28
28
  "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
29
- "purl": "pkg:npm/%40blamejs/pki@0.1.25",
29
+ "purl": "pkg:npm/%40blamejs/pki@0.1.26",
30
30
  "properties": [],
31
31
  "externalReferences": [
32
32
  {
@@ -54,7 +54,7 @@
54
54
  "components": [],
55
55
  "dependencies": [
56
56
  {
57
- "ref": "@blamejs/pki@0.1.25",
57
+ "ref": "@blamejs/pki@0.1.26",
58
58
  "dependsOn": []
59
59
  }
60
60
  ]