@mybucks.online/core 1.1.0 → 1.1.2

package/README.md

@@ -10,6 +10,10 @@ As a hash function, the **Scrypt** Key Derivation Function (KDF) increases the c
 
 It fully runs on your **browser side** without using any storage or invoking any 3rd-party APIs for key management. It instantly generates your private key from your credentials input, and whenever you close or refresh, there is **no footprint**. This absolutely protects your privacy.
 
+With mybucks.online, you can send cryptocurrency and even **wallet itself via a URL**. The recipient simply clicks the link to open the wallet and take full ownership. This feature allows you to create a one-time wallet and put stablecoins or memecoins into it. You can **transfer full ownership as a gift** without ever asking for a recipient's wallet address. These serve as a "starter" wallet for the recipients, who can then easily withdraw the funds into their own personal pockets or primary wallets.
+
+This is a powerful tool for **bulk distribution** and **massive airdrops** to many people simultaneously. You no longer need to ask for a wallet address or force users to connect their wallet to your app for a small $5 referral fee. You simply share the unique links through any messaging platform, social media, or email.
+
 ### Zero Footprint  
 - No servers, no databases, no storage and no tracking.
 - 100% browser-based.
@@ -39,6 +43,8 @@ npm install @mybucks.online/core
 
 ### 2. Generate hash, private-key and wallet address
 
+Passphrase and PIN are validated with **zxcvbn** before hashing. Weak passphrase or PIN will yield an empty hash or `null` token.
+
 ```javascript
 import { 
   getEvmPrivateKey, 

package/index.js

@@ -15,12 +15,17 @@ const HASH_OPTIONS = {
   keyLen: 64,
 };
 
+export const PASSPHRASE_MIN_LENGTH = 12;
+export const PASSPHRASE_MAX_LENGTH = 128;
+export const PIN_MIN_LENGTH = 6;
+export const PIN_MAX_LENGTH = 16;
+
 /**
  * This function computes the scrypt hash using provided passphrase and pin inputs.
- * Passphrase and pin are validated with zxcvbn; weak values are rejected (returns "").
+ * Passphrase and pin are validated by length (see PASSPHRASE_MIN/MAX_LENGTH, PIN_MIN/MAX_LENGTH) and zxcvbn; invalid or weak values are rejected (returns "").
  *
- * @param {*} passphrase - Must have zxcvbn score >= 3
- * @param {*} pin - Must have zxcvbn score >= 1
+ * @param {*} passphrase - Length in [PASSPHRASE_MIN_LENGTH, PASSPHRASE_MAX_LENGTH], zxcvbn score >= 3
+ * @param {*} pin - Length in [PIN_MIN_LENGTH, PIN_MAX_LENGTH], zxcvbn score >= 1
  * @param {*} cb a callback function designed to receive the progress updates during the scrypt hashing process.
  * @returns hash result as string format, or "" if passphrase/pin missing or too weak
  */
@@ -29,6 +34,16 @@ export async function generateHash(passphrase, pin, cb = () => {}) {
     return "";
   }
 
+  const passphraseLen = String(passphrase).length;
+  if (passphraseLen < PASSPHRASE_MIN_LENGTH || passphraseLen > PASSPHRASE_MAX_LENGTH) {
+    return "";
+  }
+
+  const pinLen = String(pin).length;
+  if (pinLen < PIN_MIN_LENGTH || pinLen > PIN_MAX_LENGTH) {
+    return "";
+  }
+
   const passphraseResult = zxcvbn(passphrase);
   if (passphraseResult.score < 3) {
     return "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mybucks.online/core",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Core module of Mybucks.online Crypto Wallet",
   "main": "index.js",
   "type": "module",