@blamejs/pki 0.5.38 → 0.6.0

package/lib/schema-cmc.js

@@ -667,7 +667,7 @@ function _finishBody(body, where) {
  * @primitive  pki.schema.cmc.parsePkiData
  * @signature  pki.schema.cmc.parsePkiData(der) -> parsed
  * @since      0.4.16
- * @status     experimental
+ * @status     stable
  * @spec       RFC 5272 sec. 3.2.1
  * @related    pki.schema.cmc.parse, pki.schema.cmc.parsePkiResponse
  *
@@ -695,7 +695,7 @@ function parsePkiData(input) {
  * @primitive  pki.schema.cmc.parsePkiResponse
  * @signature  pki.schema.cmc.parsePkiResponse(der) -> parsed
  * @since      0.4.16
- * @status     experimental
+ * @status     stable
  * @spec       RFC 5272 sec. 4.2.1
  * @related    pki.schema.cmc.parse, pki.schema.cmc.parsePkiData
  *
@@ -721,7 +721,7 @@ function parsePkiResponse(input) {
  * @primitive  pki.schema.cmc.parse
  * @signature  pki.schema.cmc.parse(input) -> parsed
  * @since      0.4.16
- * @status     experimental
+ * @status     stable
  * @spec       RFC 5272, RFC 6402
  * @defends    cmc-status-confusion (CWE-20)
  * @related    pki.schema.cmc.parsePkiData, pki.schema.cmc.parsePkiResponse, pki.cms.verify

package/lib/sigstore.js

@@ -104,7 +104,7 @@ function _jsonParse(input, code, label) {
  * @primitive pki.sigstore.pae
  * @signature pki.sigstore.pae(payloadType, payloadBytes) -> Buffer
  * @since 0.2.3
- * @status experimental
+ * @status stable
  * @spec DSSE
  * @related pki.sigstore.verifyBundle
  *
@@ -150,7 +150,7 @@ function _b64(s, label) {
  * @primitive pki.sigstore.parseBundle
  * @signature pki.sigstore.parseBundle(input) -> bundle
  * @since 0.2.3
- * @status experimental
+ * @status stable
  * @spec Sigstore bundle v0.3
  * @related pki.sigstore.verifyBundle
  *
@@ -637,7 +637,7 @@ function _statement(payload, payloadType, expectedPredicate) {
  * @primitive pki.sigstore.verifyBundle
  * @signature pki.sigstore.verifyBundle(bundle, opts) -> Promise<result>
  * @since 0.2.3
- * @status experimental
+ * @status stable
  * @spec DSSE, Sigstore bundle v0.3, RFC 9162, SLSA provenance v1
  * @related pki.sigstore.parseBundle, pki.sigstore.pae
  *

package/lib/webauthn.js

@@ -1939,7 +1939,7 @@ var CLIENT_DATA_TYPE = Object.assign(Object.create(null), { "webauthn.create": 1
  * @primitive pki.webauthn.parseClientData
  * @signature pki.webauthn.parseClientData(bytes, opts?) -> { type, challenge, origin, crossOrigin, topOrigin, checked }
  * @since 0.5.0
- * @status experimental
+ * @status stable
  * @spec W3C WebAuthn Level 3 sec. 5.8.1 / 7.1 / 7.2
  * @defends webauthn-ceremony-confusion (CWE-345)
  * @related pki.webauthn.verify, pki.webauthn.verifyAssertion
@@ -2126,7 +2126,7 @@ var _CLIENT_DATA_OPTS = Object.assign(Object.create(null), {
  * @primitive pki.webauthn.parseAuthenticatorData
  * @signature pki.webauthn.parseAuthenticatorData(bytes) -> { rpIdHash, flags, signCount, aaguid, credentialId, credentialPublicKey, credentialPublicKeyBytes, extensions }
  * @since 0.5.0
- * @status experimental
+ * @status stable
  * @spec W3C WebAuthn Level 3 sec. 6.1
  * @related pki.webauthn.verifyAssertion, pki.webauthn.parseAttestationObject
  *
@@ -2164,7 +2164,7 @@ var _ASSERT_OPTS = Object.assign(Object.create(null), {
  * @primitive pki.webauthn.verifyAssertion
  * @signature pki.webauthn.verifyAssertion(input) -> Promise<{ signatureVerified, signCount, signCountChecked, flags, rpIdHash, extensions, bindingChecked, clientData }>
  * @since 0.5.0
- * @status experimental
+ * @status stable
  * @spec W3C WebAuthn Level 3 sec. 7.2
  * @defends webauthn-assertion-forgery (CWE-347)
  * @related pki.webauthn.parseAuthenticatorData, pki.webauthn.verify

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/pki",
-  "version": "0.5.38",
+  "version": "0.6.0",
   "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:fe024f86-e1b5-48d0-97ee-173c19cc63b0",
+  "serialNumber": "urn:uuid:9aa382b4-23a6-46b3-b0c6-809ac7fb8e71",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-08-30T02:10:51.770Z",
+    "timestamp": "2026-08-30T09:44:19.627Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/pki@0.5.38",
+      "bom-ref": "@blamejs/pki@0.6.0",
       "type": "application",
       "name": "pki",
-      "version": "0.5.38",
+      "version": "0.6.0",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
-      "purl": "pkg:npm/%40blamejs/pki@0.5.38",
+      "purl": "pkg:npm/%40blamejs/pki@0.6.0",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/pki@0.5.38",
+      "ref": "@blamejs/pki@0.6.0",
       "dependsOn": []
     }
   ]