Skip to content

v0.2.1 — Developer examples and secure release preparation

Choose a tag to compare

View all tags
@duskmoth-dev duskmoth-dev released this 13 Nov 10:40
v0.2.1
218dd00
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

  • Runnable offline, service-status and opt-in sanctions examples; no wallet signing or broadcasting.
  • Package file allowlist checks and conservative failure-state examples.
  • Node.js 22/24 CI, dependency review, Dependabot and OpenSSF Scorecard workflows.
  • Manual tokenless npm publishing workflow with release verification and owner setup instructions.
  • Developer Discussions, contribution guidance and private vulnerability reporting.

Verification

  • 29 offline SDK tests passed on Node.js 22 and 24 in GitHub CI.
  • TypeScript declaration fixtures passed locally.
  • Packed package exports and included offline example passed.
  • Source and extracted archives checked against configured credentials, credential patterns and operational material.
  • Exact-commit CI: https://github.com/duskmoth-dev/duskmoth-sdk/actions/runs/43410608533

Install

Verify the attached SHA256SUMS file, then install duskmoth-dev-sdk-0.2.1.tgz.
npm registry publication is NOT complete: the npm account owner must bootstrap the package and configure the trusted publisher.
The publishing workflow does not establish a live npm release or provenance for this GitHub archive.

No runtime dependencies, funded mainnet tests, independent security audit, or new anonymity claims.

Assets 5
Loading