56b407befb6e

fix: LV-9 exact-pin crypto/vault deps (hash-wasm, @stablelib/*, zstd-wasm, reed-solomon, pdfjs-dist, tldts) + WASM-PROVENANCE SHA-256 table

time
2026-06-10 02:55 UTC · 4 months ago
machine
koh2
agent
claude-opus-4-8
session
audit fix integration
parent
2a773119080b
3 files WASM-PROVENANCE.md+7 −5bun.lock+11 −11package.json+11 −11
WASM-PROVENANCE.md+7 −5
@@ -23,13 +23,15 @@2323 2424 ## Recorded digests2525 26-Populate at integration time (`shasum -a 256 <blob>`), one line per blob:26+Recorded 2026-06-09 (`shasum -a 256`) at the pinned versions. hash-wasm and27+ggwave inline their WASM as base64 inside JS, so the JS bundle is hashed;28+zstd and reed-solomon ship standalone `.wasm` blobs.2729 2830 ```29-<sha256>  node_modules/hash-wasm/dist/... (argon2id wasm)30-<sha256>  node_modules/@bokuweb/zstd-wasm/dist/... (zstd wasm)31-<sha256>  node_modules/@subspace/reed-solomon-erasure.wasm/... (rs wasm)32-<sha256>  public/ggwave/ggwave.wasm31+dcec617a2e1b700fa132d1583a186cb70611113395e869f2dd6cc82b415d3094  node_modules/hash-wasm/dist/argon2.umd.min.js (argon2id wasm, inlined)32+80260eee5795ee8072bb5821e203730c74dca3909938f5ac1128da67f96223df  node_modules/@bokuweb/zstd-wasm/dist/esm/zstd.wasm33+cd64629066151189f59e77efec8e45511605d7fff61836a00c1c9220d92873ec  node_modules/@subspace/reed-solomon-erasure.wasm/dist/reed_solomon_erasure_bg.wasm34+88ed23a8ae43bb12593ca3e767c4350b695cba610254a9d30940d4a225c837bf  public/ggwave/ggwave.js (ggwave wasm inlined; includes PEACH-PATCH LV-7)3335 ```3436 3537 Audit reference: peach-browser-security-audit.md, Open Question 3.

view file

bun.lock+11 −11
@@ -5,26 +5,26 @@55     "": {66       "name": "peach",77       "dependencies": {8-        "@bokuweb/zstd-wasm": "^0.0.27",9-        "@stablelib/blake2s": "^2.0.1",10-        "@stablelib/chacha20poly1305": "^2.0.1",11-        "@stablelib/hkdf": "^2.0.1",12-        "@stablelib/hmac": "^2.0.1",13-        "@stablelib/sha256": "^2.0.1",14-        "@stablelib/x25519": "^2.0.1",15-        "@subspace/reed-solomon-erasure.wasm": "^0.2.5",8+        "@bokuweb/zstd-wasm": "0.0.27",9+        "@stablelib/blake2s": "2.0.1",10+        "@stablelib/chacha20poly1305": "2.0.1",11+        "@stablelib/hkdf": "2.0.1",12+        "@stablelib/hmac": "2.0.1",13+        "@stablelib/sha256": "2.0.1",14+        "@stablelib/x25519": "2.0.1",15+        "@subspace/reed-solomon-erasure.wasm": "0.2.5",1616         "@zxcvbn-ts/core": "3.0.4",1717         "@zxcvbn-ts/language-common": "3.0.4",1818         "@zxcvbn-ts/language-en": "3.0.2",1919         "@zxing/library": "^0.23.0",2020         "bwip-js": "^4.10.1",21-        "hash-wasm": "^4.12.0",21+        "hash-wasm": "4.12.0",2222         "otpauth": "^9.5.0",2323         "pako": "^2.1.0",2424         "papaparse": "^5.5.3",2525         "pdf-lib": "^1.17.1",26-        "pdfjs-dist": "^5.7.284",27-        "tldts": "^7.0.28",26+        "pdfjs-dist": "5.7.284",27+        "tldts": "7.0.28",2828       },2929       "devDependencies": {3030         "@crxjs/vite-plugin": "^2.4.0",

view file

package.json+11 −11
@@ -28,23 +28,23 @@2828     "npm": ">=10.0.0"2929   },3030   "dependencies": {31-    "@bokuweb/zstd-wasm": "^0.0.27",32-    "@stablelib/blake2s": "^2.0.1",33-    "@stablelib/chacha20poly1305": "^2.0.1",34-    "@stablelib/hkdf": "^2.0.1",35-    "@stablelib/hmac": "^2.0.1",36-    "@stablelib/sha256": "^2.0.1",37-    "@stablelib/x25519": "^2.0.1",38-    "@subspace/reed-solomon-erasure.wasm": "^0.2.5",31+    "@bokuweb/zstd-wasm": "0.0.27",32+    "@stablelib/blake2s": "2.0.1",33+    "@stablelib/chacha20poly1305": "2.0.1",34+    "@stablelib/hkdf": "2.0.1",35+    "@stablelib/hmac": "2.0.1",36+    "@stablelib/sha256": "2.0.1",37+    "@stablelib/x25519": "2.0.1",38+    "@subspace/reed-solomon-erasure.wasm": "0.2.5",3939     "@zxing/library": "^0.23.0",4040     "bwip-js": "^4.10.1",41-    "hash-wasm": "^4.12.0",41+    "hash-wasm": "4.12.0",4242     "otpauth": "^9.5.0",4343     "pako": "^2.1.0",4444     "papaparse": "^5.5.3",4545     "pdf-lib": "^1.17.1",46-    "pdfjs-dist": "^5.7.284",47-    "tldts": "^7.0.28",46+    "pdfjs-dist": "5.7.284",47+    "tldts": "7.0.28",4848     "@zxcvbn-ts/core": "3.0.4",4949     "@zxcvbn-ts/language-common": "3.0.4",5050     "@zxcvbn-ts/language-en": "3.0.2"

view file