49f3442e5c
Publishing under upstream's exact version was not merely confusing in a lockfile — it was unsafe. @polkadot/util-crypto pins @polkadot/networks at an exact version, and @polkadot/keyring pins util-crypto the same way. With every fork numbered 14.0.3, a consumer that forgot one resolution would have yarn quietly satisfy that pin from npm: the *unforked* upstream package, installing cleanly, with no Quantus network entry or no isDilithium, and nothing to indicate anything was wrong until something failed much later for an unrelated-looking reason. Renaming the forks makes that a resolution failure instead. Verified by deleting the @polkadot/networks resolution in quantus/ui and running an install: YN0082: @polkadot/networks@npm:14.0.3-quantus.1: No candidates found Unforked dependencies keep upstream's numbers — @polkadot/util, x-bigint, x-randomvalues, wasm-* — because they come from npm and should. Published with `--tag quantus`, which npm requires for a prerelease version and which is the honest dist-tag anyway: these are not upstream's `latest`. The tag is informational, since consumers pin by tarball URL. The old 14.0.3 artifacts have been deleted from the registry so nothing can resolve to them. Refs quantus/extension#2 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012uDUodEcRbBwNRi3UCmw8f
47 lines
1.2 KiB
JSON
47 lines
1.2 KiB
JSON
{
|
|
"author": "Jaco Greeff <jacogr@gmail.com>",
|
|
"bugs": "https://github.com/polkadot-js/common/issues",
|
|
"description": "A collection of useful crypto utilities for @polkadot",
|
|
"engines": {
|
|
"node": ">=18"
|
|
},
|
|
"homepage": "https://github.com/polkadot-js/common/tree/master/packages/util-crypto#readme",
|
|
"license": "Apache-2.0",
|
|
"name": "@polkadot/util-crypto",
|
|
"repository": {
|
|
"directory": "packages/util-crypto",
|
|
"type": "git",
|
|
"url": "https://github.com/polkadot-js/common.git"
|
|
},
|
|
"sideEffects": [
|
|
"./bundleInit.js",
|
|
"./bundleInit.cjs",
|
|
"./packageDetect.js",
|
|
"./packageDetect.cjs"
|
|
],
|
|
"type": "module",
|
|
"version": "14.0.3-quantus.1",
|
|
"browser": {
|
|
"crypto": false,
|
|
"stream": false
|
|
},
|
|
"main": "index.js",
|
|
"dependencies": {
|
|
"@noble/curves": "^1.3.0",
|
|
"@noble/hashes": "^1.3.3",
|
|
"@polkadot/networks": "14.0.3-quantus.1",
|
|
"@polkadot/util": "14.0.3",
|
|
"@polkadot/wasm-crypto": "^7.5.3",
|
|
"@polkadot/wasm-util": "^7.5.3",
|
|
"@polkadot/x-bigint": "14.0.3",
|
|
"@polkadot/x-randomvalues": "14.0.3",
|
|
"@quantus/crypto": "^0.1.0",
|
|
"@scure/base": "^1.1.7",
|
|
"@scure/sr25519": "^0.2.0",
|
|
"tslib": "^2.8.0"
|
|
},
|
|
"peerDependencies": {
|
|
"@polkadot/util": "14.0.3"
|
|
}
|
|
}
|