funding.json directory

Creation of signed packages infrastructure for node.js

There have been a lot of supply-chain attacks on projects, by way of creating fake or tainted node.js packages. The base for this attack is complete anonimity without even signature for the packages. We plan to use our experience in blockchain technologies, to create a new infrastructure for node.js where packages must be signed by developers and developer teams. Authorized signatures will be elected by the user and developer community.

Fund this project

Report listing

Loading report form…

Unverified URL

The funding manifest has not provided proof via wellKnown that this link is associated with it. Learn more (opens in a new tab).