PeculiarVentures / attestation / 40664679331

60%

push

github

refactor(deps): replace pvtsutils with @peculiar/utils (#31)

Marvell now uses @peculiar/utils ^4.1.0 from its root entry, as x509 3
does, and drops pvtsutils:

- Convert.ToHex -> hex.encode (lowercase, as before)
- Convert.ToUtf8String -> utf8.decode
- BufferSourceConverter.isBufferSource / isEqual / toArrayBuffer /
  toUint8Array -> isBufferSource / equal / toArrayBuffer / toUint8Array

Two inputs behave differently and now have specs:

- A SharedArrayBuffer (or a view over one) is a buffer source for utils,
  where pvtsutils rejected it. parse() copies shared memory first, because
  signedData and signature are views of the input and WebCrypto rejects
  views over shared memory, so parse(), read() and verifyEvidence() accept
  it end to end.
- Invalid UTF-8 in the OBJ_ATTR_LABEL / OBJ_ATTR_ID text attributes decodes
  to U+FFFD instead of throwing "URI malformed" from parse(). Signature
  verification covers the raw bytes and is unaffected.

Specs also pin lowercase hex certificate ids and parsing of Uint8Array and
DataView inputs at non-zero byte offsets.

273 of 424 branches covered (64.39%)

Branch coverage included in aggregate %.

16 of 16 new or added lines in 6 files covered. (100.0%)

466 of 803 relevant lines covered (58.03%)

492.87 hits per line