@floegence/flowersec-core 2.3.7 → 2.3.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -4
- package/package.json +3 -3
- package/sbom/cyclonedx.json +6 -6
- package/sbom/spdx.json +11 -11
package/README.md
CHANGED
|
@@ -49,11 +49,15 @@ A negotiated `Session.unreliableMessages` channel sends defensively copied `Uint
|
|
|
49
49
|
|
|
50
50
|
## Supported Connections
|
|
51
51
|
|
|
52
|
-
Browsers support WebSocket
|
|
52
|
+
Browsers support WebSocket. Browser WebTransport is capability-dependent on
|
|
53
|
+
the browser's WebTransport API and is an optional browser adapter, not a
|
|
54
|
+
required native-server carrier. Through
|
|
53
55
|
`/node`, Node.js supports WebSocket and raw QUIC client connections, direct
|
|
54
56
|
server sessions, and opaque `TunnelRuntime` relay legs. Raw QUIC uses the
|
|
55
|
-
Flowersec-owned optional native addon and
|
|
56
|
-
loads from the browser entrypoint. The
|
|
57
|
+
Flowersec-owned optional native addon wrapper and one of its supported
|
|
58
|
+
prebuilt platform packages; it never loads from the browser entrypoint. The
|
|
59
|
+
wrapper selects the matching optional package for macOS arm64/x64 or Linux
|
|
60
|
+
arm64/x64 glibc. Windows and musl packages are not published. The same Node entrypoint provides the
|
|
57
61
|
control plane and `ProxyServer`, and the relay never terminates an E2EE
|
|
58
62
|
Session. WebTransport is an optional adapter profile and the Node.js runtime
|
|
59
63
|
does not currently expose a production adapter.
|
|
@@ -76,7 +80,8 @@ The proxy entrypoint accepts an opaque `ArtifactLease` or an already connected `
|
|
|
76
80
|
|
|
77
81
|
Browser applications receive a ready `Session` from `connect(...)`. The browser
|
|
78
82
|
connector supports WSS, restricted plaintext loopback WebSocket direct
|
|
79
|
-
connections, and WebTransport
|
|
83
|
+
connections, and WebTransport when the browser exposes that API. WebTransport
|
|
84
|
+
uses browser-owned HTTP/3 streams and is not available in the Node entrypoint.
|
|
80
85
|
|
|
81
86
|
Chromium does not support a WebTransport pooling option; each carrier creates an independent native WebTransport connection.
|
|
82
87
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@floegence/flowersec-core",
|
|
3
|
-
"version": "2.3.
|
|
3
|
+
"version": "2.3.8",
|
|
4
4
|
"description": "Flowersec core TypeScript library for carrier-neutral encrypted sessions and multiplexed streams.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
@@ -77,7 +77,7 @@
|
|
|
77
77
|
"ws": "^8.21.2"
|
|
78
78
|
},
|
|
79
79
|
"optionalDependencies": {
|
|
80
|
-
"@floegence/flowersec-node-native": "2.3.
|
|
80
|
+
"@floegence/flowersec-node-native": "2.3.8"
|
|
81
81
|
},
|
|
82
82
|
"devDependencies": {
|
|
83
83
|
"@playwright/test": "1.62.1",
|
|
@@ -95,5 +95,5 @@
|
|
|
95
95
|
"vite": "^8.2.1",
|
|
96
96
|
"vitest": "4.1.10"
|
|
97
97
|
},
|
|
98
|
-
"flowersecSourceCommit": "
|
|
98
|
+
"flowersecSourceCommit": "42ecb756ca3b1d0201628534f0304f9d95b09915"
|
|
99
99
|
}
|
package/sbom/cyclonedx.json
CHANGED
|
@@ -1,20 +1,20 @@
|
|
|
1
1
|
{
|
|
2
2
|
"bomFormat": "CycloneDX",
|
|
3
3
|
"specVersion": "1.5",
|
|
4
|
-
"serialNumber": "urn:uuid:
|
|
4
|
+
"serialNumber": "urn:uuid:e995e70c-2186-53ce-8d53-420ef784523c",
|
|
5
5
|
"version": 1,
|
|
6
6
|
"metadata": {
|
|
7
7
|
"component": {
|
|
8
8
|
"type": "library",
|
|
9
9
|
"name": "@floegence/flowersec-core",
|
|
10
|
-
"version": "2.3.
|
|
11
|
-
"purl": "pkg:npm/%40floegence/flowersec-core@2.3.
|
|
12
|
-
"bom-ref": "pkg:npm/%40floegence/flowersec-core@2.3.
|
|
10
|
+
"version": "2.3.8",
|
|
11
|
+
"purl": "pkg:npm/%40floegence/flowersec-core@2.3.8",
|
|
12
|
+
"bom-ref": "pkg:npm/%40floegence/flowersec-core@2.3.8"
|
|
13
13
|
},
|
|
14
14
|
"properties": [
|
|
15
15
|
{
|
|
16
16
|
"name": "flowersec:source-inventory-sha256",
|
|
17
|
-
"value": "
|
|
17
|
+
"value": "61acdda38c1b589f90670adc84ce2cfd838f91aaae3f7881bfc17397951c98ca"
|
|
18
18
|
}
|
|
19
19
|
]
|
|
20
20
|
},
|
|
@@ -190,7 +190,7 @@
|
|
|
190
190
|
],
|
|
191
191
|
"dependencies": [
|
|
192
192
|
{
|
|
193
|
-
"ref": "pkg:npm/%40floegence/flowersec-core@2.3.
|
|
193
|
+
"ref": "pkg:npm/%40floegence/flowersec-core@2.3.8",
|
|
194
194
|
"dependsOn": [
|
|
195
195
|
"pkg:npm/%40noble/ciphers@2.3.0",
|
|
196
196
|
"pkg:npm/%40noble/curves@2.3.0",
|
package/sbom/spdx.json
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
"dataLicense": "CC0-1.0",
|
|
4
4
|
"SPDXID": "SPDXRef-DOCUMENT",
|
|
5
5
|
"name": "flowersec-ts",
|
|
6
|
-
"documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/
|
|
6
|
+
"documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/61acdda38c1b589f90670adc84ce2cfd838f91aaae3f7881bfc17397951c98ca",
|
|
7
7
|
"creationInfo": {
|
|
8
8
|
"created": "1970-01-01T00:00:00Z",
|
|
9
9
|
"creators": [
|
|
@@ -13,19 +13,19 @@
|
|
|
13
13
|
"packages": [
|
|
14
14
|
{
|
|
15
15
|
"name": "@floegence/flowersec-core",
|
|
16
|
-
"SPDXID": "SPDXRef-Package-
|
|
17
|
-
"versionInfo": "2.3.
|
|
16
|
+
"SPDXID": "SPDXRef-Package-4908e4f26e4e95fbc182",
|
|
17
|
+
"versionInfo": "2.3.8",
|
|
18
18
|
"downloadLocation": "NOASSERTION",
|
|
19
19
|
"filesAnalyzed": false,
|
|
20
20
|
"licenseConcluded": "NOASSERTION",
|
|
21
21
|
"licenseDeclared": "NOASSERTION",
|
|
22
22
|
"copyrightText": "NOASSERTION",
|
|
23
|
-
"comment": "Flowersec source inventory SHA-256:
|
|
23
|
+
"comment": "Flowersec source inventory SHA-256: 61acdda38c1b589f90670adc84ce2cfd838f91aaae3f7881bfc17397951c98ca",
|
|
24
24
|
"externalRefs": [
|
|
25
25
|
{
|
|
26
26
|
"referenceCategory": "PACKAGE-MANAGER",
|
|
27
27
|
"referenceType": "purl",
|
|
28
|
-
"referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.3.
|
|
28
|
+
"referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.3.8"
|
|
29
29
|
}
|
|
30
30
|
]
|
|
31
31
|
},
|
|
@@ -136,30 +136,30 @@
|
|
|
136
136
|
{
|
|
137
137
|
"spdxElementId": "SPDXRef-DOCUMENT",
|
|
138
138
|
"relationshipType": "DESCRIBES",
|
|
139
|
-
"relatedSpdxElement": "SPDXRef-Package-
|
|
139
|
+
"relatedSpdxElement": "SPDXRef-Package-4908e4f26e4e95fbc182"
|
|
140
140
|
},
|
|
141
141
|
{
|
|
142
|
-
"spdxElementId": "SPDXRef-Package-
|
|
142
|
+
"spdxElementId": "SPDXRef-Package-4908e4f26e4e95fbc182",
|
|
143
143
|
"relationshipType": "DEPENDS_ON",
|
|
144
144
|
"relatedSpdxElement": "SPDXRef-Package-5ce913a03239b02770fb"
|
|
145
145
|
},
|
|
146
146
|
{
|
|
147
|
-
"spdxElementId": "SPDXRef-Package-
|
|
147
|
+
"spdxElementId": "SPDXRef-Package-4908e4f26e4e95fbc182",
|
|
148
148
|
"relationshipType": "DEPENDS_ON",
|
|
149
149
|
"relatedSpdxElement": "SPDXRef-Package-01009adf60db02c13634"
|
|
150
150
|
},
|
|
151
151
|
{
|
|
152
|
-
"spdxElementId": "SPDXRef-Package-
|
|
152
|
+
"spdxElementId": "SPDXRef-Package-4908e4f26e4e95fbc182",
|
|
153
153
|
"relationshipType": "DEPENDS_ON",
|
|
154
154
|
"relatedSpdxElement": "SPDXRef-Package-8815b117c8a1d5f7eeb0"
|
|
155
155
|
},
|
|
156
156
|
{
|
|
157
|
-
"spdxElementId": "SPDXRef-Package-
|
|
157
|
+
"spdxElementId": "SPDXRef-Package-4908e4f26e4e95fbc182",
|
|
158
158
|
"relationshipType": "DEPENDS_ON",
|
|
159
159
|
"relatedSpdxElement": "SPDXRef-Package-f8b45a289df643042b94"
|
|
160
160
|
},
|
|
161
161
|
{
|
|
162
|
-
"spdxElementId": "SPDXRef-Package-
|
|
162
|
+
"spdxElementId": "SPDXRef-Package-4908e4f26e4e95fbc182",
|
|
163
163
|
"relationshipType": "DEPENDS_ON",
|
|
164
164
|
"relatedSpdxElement": "SPDXRef-Package-b779412f685822663496"
|
|
165
165
|
},
|