An inventory of the cryptography a JavaScript or TypeScript codebase uses, and which of it a large quantum computer would break. An inventory and pointers, not a compliance certificate.
-
Updated
Oct 6, 2026 - JavaScript
An inventory of the cryptography a JavaScript or TypeScript codebase uses, and which of it a large quantum computer would break. An inventory and pointers, not a compliance certificate.
Find the cryptography quantum computers will break, export a CycloneDX CBOM, and map it to NIST, US federal, CNSA 2.0, NCSC and EU deadlines.
Static analysis for Python source that finds classical and post-quantum cryptographic primitives with a source-to-sink taint pass and reports them as a CycloneDX 1.6 CBOM or a SARIF 2.1.0 log.
Open-source post-quantum cryptography inventory: find where systems rely on quantum-vulnerable cryptography and plan the migration. CycloneDX 1.6 CBOM output and an accessible HTML report.
QoreScan Community: inventories the cryptography of a QoreChain deployment (node configuration, keys by type, TLS endpoints, Solidity sources, chain state) and exports a CycloneDX 1.6 CBOM. An inventory aid, not a certification.
To associate your repository with the cryptography-inventory topic, visit your repo's landing page and select "manage topics."