56b407befb6e
fix: LV-9 exact-pin crypto/vault deps (hash-wasm, @stablelib/*, zstd-wasm, reed-solomon, pdfjs-dist, tldts) + WASM-PROVENANCE SHA-256 table
- time
- 2026-06-10 02:55 UTC · 4 months ago
- machine
- koh2
- agent
- claude-opus-4-8
- session
- audit fix integration
- parent
- 2a773119080b
↓ peach-browser-56b407be.tar.gzatlas at this save
files changed3 files
WASM-PROVENANCE.md+7 −5bun.lock+11 −11package.json+11 −11WASM-PROVENANCE.md+7 −5
@@ -23,13 +23,15 @@2323 2424 ## Recorded digests2525 26-Populate at integration time (`shasum -a 256 <blob>`), one line per blob:26+Recorded 2026-06-09 (`shasum -a 256`) at the pinned versions. hash-wasm and27+ggwave inline their WASM as base64 inside JS, so the JS bundle is hashed;28+zstd and reed-solomon ship standalone `.wasm` blobs.2729 2830 ```29-<sha256> node_modules/hash-wasm/dist/... (argon2id wasm)30-<sha256> node_modules/@bokuweb/zstd-wasm/dist/... (zstd wasm)31-<sha256> node_modules/@subspace/reed-solomon-erasure.wasm/... (rs wasm)32-<sha256> public/ggwave/ggwave.wasm31+dcec617a2e1b700fa132d1583a186cb70611113395e869f2dd6cc82b415d3094 node_modules/hash-wasm/dist/argon2.umd.min.js (argon2id wasm, inlined)32+80260eee5795ee8072bb5821e203730c74dca3909938f5ac1128da67f96223df node_modules/@bokuweb/zstd-wasm/dist/esm/zstd.wasm33+cd64629066151189f59e77efec8e45511605d7fff61836a00c1c9220d92873ec node_modules/@subspace/reed-solomon-erasure.wasm/dist/reed_solomon_erasure_bg.wasm34+88ed23a8ae43bb12593ca3e767c4350b695cba610254a9d30940d4a225c837bf public/ggwave/ggwave.js (ggwave wasm inlined; includes PEACH-PATCH LV-7)3335 ```3436 3537 Audit reference: peach-browser-security-audit.md, Open Question 3.bun.lock+11 −11
@@ -5,26 +5,26 @@55 "": {66 "name": "peach",77 "dependencies": {8- "@bokuweb/zstd-wasm": "^0.0.27",9- "@stablelib/blake2s": "^2.0.1",10- "@stablelib/chacha20poly1305": "^2.0.1",11- "@stablelib/hkdf": "^2.0.1",12- "@stablelib/hmac": "^2.0.1",13- "@stablelib/sha256": "^2.0.1",14- "@stablelib/x25519": "^2.0.1",15- "@subspace/reed-solomon-erasure.wasm": "^0.2.5",8+ "@bokuweb/zstd-wasm": "0.0.27",9+ "@stablelib/blake2s": "2.0.1",10+ "@stablelib/chacha20poly1305": "2.0.1",11+ "@stablelib/hkdf": "2.0.1",12+ "@stablelib/hmac": "2.0.1",13+ "@stablelib/sha256": "2.0.1",14+ "@stablelib/x25519": "2.0.1",15+ "@subspace/reed-solomon-erasure.wasm": "0.2.5",1616 "@zxcvbn-ts/core": "3.0.4",1717 "@zxcvbn-ts/language-common": "3.0.4",1818 "@zxcvbn-ts/language-en": "3.0.2",1919 "@zxing/library": "^0.23.0",2020 "bwip-js": "^4.10.1",21- "hash-wasm": "^4.12.0",21+ "hash-wasm": "4.12.0",2222 "otpauth": "^9.5.0",2323 "pako": "^2.1.0",2424 "papaparse": "^5.5.3",2525 "pdf-lib": "^1.17.1",26- "pdfjs-dist": "^5.7.284",27- "tldts": "^7.0.28",26+ "pdfjs-dist": "5.7.284",27+ "tldts": "7.0.28",2828 },2929 "devDependencies": {3030 "@crxjs/vite-plugin": "^2.4.0",package.json+11 −11
@@ -28,23 +28,23 @@2828 "npm": ">=10.0.0"2929 },3030 "dependencies": {31- "@bokuweb/zstd-wasm": "^0.0.27",32- "@stablelib/blake2s": "^2.0.1",33- "@stablelib/chacha20poly1305": "^2.0.1",34- "@stablelib/hkdf": "^2.0.1",35- "@stablelib/hmac": "^2.0.1",36- "@stablelib/sha256": "^2.0.1",37- "@stablelib/x25519": "^2.0.1",38- "@subspace/reed-solomon-erasure.wasm": "^0.2.5",31+ "@bokuweb/zstd-wasm": "0.0.27",32+ "@stablelib/blake2s": "2.0.1",33+ "@stablelib/chacha20poly1305": "2.0.1",34+ "@stablelib/hkdf": "2.0.1",35+ "@stablelib/hmac": "2.0.1",36+ "@stablelib/sha256": "2.0.1",37+ "@stablelib/x25519": "2.0.1",38+ "@subspace/reed-solomon-erasure.wasm": "0.2.5",3939 "@zxing/library": "^0.23.0",4040 "bwip-js": "^4.10.1",41- "hash-wasm": "^4.12.0",41+ "hash-wasm": "4.12.0",4242 "otpauth": "^9.5.0",4343 "pako": "^2.1.0",4444 "papaparse": "^5.5.3",4545 "pdf-lib": "^1.17.1",46- "pdfjs-dist": "^5.7.284",47- "tldts": "^7.0.28",46+ "pdfjs-dist": "5.7.284",47+ "tldts": "7.0.28",4848 "@zxcvbn-ts/core": "3.0.4",4949 "@zxcvbn-ts/language-common": "3.0.4",5050 "@zxcvbn-ts/language-en": "3.0.2"