Commit f4fc47825a79aba2306ff78c679da3c9a457e755
Update readme to reflect audit (#408)
* updated readme to reflect audit * update Twitter badgeGregory Rocco authored on 3/21/2022, 2:53:23 AM
GitHub committed on 3/21/2022, 2:53:23 AM
Parent: 65cb9121a4adb84434e0bfb1cdba453d9923244f
Files changed
| README.md | changed |
| README.md | ||
|---|---|---|
| @@ -1,8 +1,8 @@ | ||
| 1 | 1 … | [](https://github.com/spruceid/ssi/actions?query=workflow%3Aci+branch%3Amain) |
| 2 | 2 … | [](https://www.rust-lang.org/) |
| 3 | 3 … | [](https://github.com/spruceid/didkit/blob/main/LICENSE) |
| 4 | -[](https://twitter.com/sprucesystems) | |
| 4 … | +[](https://twitter.com/spruceid) | |
| 5 | 5 … | |
| 6 | 6 … | SSI's documentation is currently packaged with the DIDKit documentation |
| 7 | 7 … | [here](https://spruceid.dev/docs/didkit/). |
| 8 | 8 … | |
| @@ -15,25 +15,17 @@ | ||
| 15 | 15 … | [`didkit`](https://github.com/spruceid/didkit) library as a core dependency. |
| 16 | 16 … | |
| 17 | 17 … |  |
| 18 | 18 … | |
| 19 | -## Maturity Disclaimer | |
| 19 … | +## Security Audits | |
| 20 | 20 … | |
| 21 | -In the v0.1 release on January 27th, 2021, SSI has not yet undergone a formal | |
| 22 | -security audit and to desired levels of confidence for suitable use in | |
| 23 | -production systems. This implementation is currently suitable for exploratory | |
| 24 | -work and experimentation only. We welcome feedback on the usability, | |
| 25 | -architecture, and security of this implementation and are committed to a | |
| 26 | -conducting a formal audit with a reputable security firm before the v1.0 | |
| 27 | -release. | |
| 21 … | +ssi has undergone the following security reviews: | |
| 22 … | +- [March 14th, 2022 - Trail of Bits](https://github.com/trailofbits/publications/blob/master/reviews/SpruceID.pdf) | [Summary of Findings](https://blog.spruceid.com/spruce-completes-first-security-audit-from-trail-of-bits/) | |
| 28 | 23 … | |
| 29 | 24 … | We are setting up a process to accept contributions. Please feel free to open |
| 30 | 25 … | issues or PRs in the interim, but we cannot merge external changes until this |
| 31 | 26 … | process is in place. |
| 32 | 27 … | |
| 33 | -We are also in the process of creating crates.io entries for the DIDKit and SSI | |
| 34 | -packages. | |
| 35 | - | |
| 36 | 28 … | ## Dependencies |
| 37 | 29 … | |
| 38 | 30 … | ``` |
| 39 | 31 … | clang |
Built with git-ssb-web