[Baskerville42]

Summary

• prepare @udid-tools/core 0.1.0-beta.12 across package metadata, lockfiles, README, documentation, compatibility references, and release-integrity instructions
• release encrypted PKCS#12 safe-content and private-key support with bounded fail-closed KDF handling
• include the patched development toolchain and refreshed pinned security/Scorecard actions
• refresh the locked consumer fixture from the exact beta.12 tarball

Verification

• npm ci --ignore-scripts --no-audit --no-fund
• npm run verify
• npm audit --audit-level=high: 0 vulnerabilities
• npm audit signatures: 517 verified signatures, 161 verified attestations
• exact tarball allow-list inspection, CycloneDX SBOM generation, checksum generation, exports check, and consumer installation/import smoke test

Post-merge

After approval and merge, create the GitHub-verified signed annotated v0.1.0-beta.12 tag and monitor the release workflow that publishes the same verified artifact to npm, GitHub Packages, and GitHub Releases.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!