[Openid-specs-digital-credentials-protocols] [Openid-specs-ab] Open Source Libraries for OID4VC specs.

[Tom Jones]

The ossf claims to have one, but it is not so helpful.
https://best.openssf.org/Concise-Guide-for-Evaluating-Open-Source-Software

I would start with a short list based on Biden's EO and expand as we move
forward
1. Is there an accountable party to address vulnerabilities?
2. Is there a comprehensive SBOM.



thx ..Tom (mobile)

On Fri, Sep 8, 2023, 12:45 AM <torsten at lodderstedt.net> wrote:

> Hi Tom,
>
> good idea. Is there a concise list of those requirements?
>
> best regards,
> Torsten.
> Am 5. Sept. 2023, 21:37 +0200 schrieb Tom Jones via Openid-specs-ab <
> openid-specs-ab at lists.openid.net>:
>
> Based on the DHS requirements I believe we will need to put into place
> security requirements for oss libraries if we want to see any government
> adoption. We may as well start now!
>
> thx ..Tom (mobile)
>
> On Tue, Sep 5, 2023, 10:38 AM Kristina Yasuda via Openid-specs-ab <
> openid-specs-ab at lists.openid.net> wrote:
>
>> Hi,
>>
>>
>>
>> Following are the open source libraries that the DCP WG co-chairs are
>> aware of for the OID4VC specification family. Please let us know if we are
>> missing any! This is important for keeping up to date our presentations, WG
>> page and identifying potential participants of OID4VC test suite that OIDF
>> certification team has been making a lot of progress on!
>>
>>
>>
>> Walt.id
>>
>>    - https://github.com/walt-id/waltid-ssikit (Kotlin)
>>
>> Sphereon
>>
>>    - https://github.com/Sphereon-Opensource/SIOP-OpenID4VP (Typescript)
>>    - https://github.com/Sphereon-Opensource/OpenID4VCI-client
>>    (Typescript)
>>    - https://github.com/Sphereon-Opensource/ssi-sdk (Typescript)
>>
>> Microsoft
>>
>>    - https://github.com/microsoft/VerifiableCredential-SDK-Android
>>    (Kotlin)
>>    - https://github.com/microsoft/VerifiableCredential-SDK-iOS (Swift)
>>
>> Spruce
>>
>>    - https://github.com/spruceid/oidc4vci-rs (Rust)
>>    - https://github.com/spruceid/oidc4vci-issuer (Rust)
>>
>> EBSI
>>
>>    - https://api-pilot.ebsi.eu/docs/libraries (Javascript)
>>
>> Impierce Technologies
>>
>>    - https://github.com/impierce/openid4vc (Rust)
>>
>>
>>
>> Cheers,
>>
>> Kristina
>> _______________________________________________
>> Openid-specs-ab mailing list
>> Openid-specs-ab at lists.openid.net
>> https://lists.openid.net/mailman/listinfo/openid-specs-ab
>>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> https://lists.openid.net/mailman/listinfo/openid-specs-ab
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20230908/3d421202/attachment.html>