@treeship/verify 0.31.5 → 0.31.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -0
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -18,6 +18,8 @@ Three functions. Each accepts a parsed object, a JSON string, or a URL.
|
|
|
18
18
|
|
|
19
19
|
Runs the JSON-level checks a Treeship Session Receipt carries: Merkle root recomputation, inclusion proof verification, leaf-count parity, timeline ordering.
|
|
20
20
|
|
|
21
|
+
What it does not check, by design: the Merkle leaves are artifact ids, so the `digest` column beside each id is not recomputed against anything here. Rewriting an artifact's `digest` in the JSON still yields `structural-pass`; the id is what the tree binds, and only `treeship package verify` on the sealed package, with the envelope bytes, checks the digest against the signed bytes. The outcome name says `structural` for this reason.
|
|
22
|
+
|
|
21
23
|
```typescript
|
|
22
24
|
import { verifyReceipt } from '@treeship/verify';
|
|
23
25
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@treeship/verify",
|
|
3
|
-
"version": "0.31.
|
|
3
|
+
"version": "0.31.6",
|
|
4
4
|
"description": "Zero-dependency cryptographic verification for Treeship receipts and certificates. Runs anywhere WASM runs: Node, browser, Vercel Edge, Cloudflare Workers, AWS Lambda.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"repository": {
|
|
@@ -40,7 +40,7 @@
|
|
|
40
40
|
"test": "vitest run"
|
|
41
41
|
},
|
|
42
42
|
"dependencies": {
|
|
43
|
-
"@treeship/core-wasm": "0.31.
|
|
43
|
+
"@treeship/core-wasm": "0.31.6"
|
|
44
44
|
},
|
|
45
45
|
"devDependencies": {
|
|
46
46
|
"@types/node": "^25.5.0",
|