npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@quantovainc/qcommodity

v0.1.1

Published

Quantum secure provenance and chain of custody records for commodities. Proves the lot declaration grading custody transfer and delivery of oil gas grain and bulk commodities, with ML-DSA-65 under FIPS 204 and Quantova time proofs. No holder data ever lea

Downloads

0

Readme

QCommodity

QCommodity is a live production post quantum provenance and chain of custody tool for commodities on the Quantova network. It proves the declaration, grading, custody, transfer and delivery of oil, gas, grain and bulk commodities, and it lets any third party confirm that history without trusting the party that created it.

QCommodity proves records without disclosing them. Lot identities and holder details stay private on the systems of the party that holds them. Only a salted cryptographic commitment is written to the chain.

What it records

Each record is a signed envelope of one of five types.

  1. lot, a producer declares a commodity lot with its commodity code, quantity, unit and origin.
  2. grade, a grader certifies the grade of a lot.
  3. custody, a custodian states that a lot is held in a named facility.
  4. transfer, the holder of a lot moves it to another party.
  5. deliver, the holder delivers a lot to a destination and it leaves the chain of custody.

Every record is signed with ML-DSA-65 under FIPS 204 by the party whose role it names, and each later record links to the one before it so the whole life of a lot forms a chain.

Install

npm install @quantovainc/qcommodity

Use

const qcommodity = require('@quantovainc/qcommodity');

const producer = qcommodity.generateKey();
const parcel = qcommodity.lot({ key: producer, commodity: 'crude_oil', quantity: 500000, unit: 'barrel', origin: 'North Sea', producerLabel: 'State Oil Company' });
const anchored = await qcommodity.anchor(parcel, { seed, index: 0, network: 'testnet' });
const result = await qcommodity.verify(anchored[0], { type: 'lot', network: 'testnet' });

What a record does not establish

  1. It does not show that the stated quantity or grade is true. It shows only that the signer stated it and that the statement existed unchanged at a point in time.
  2. It does not identify a natural or legal person. The signer is a chain address, and linking an address to a producer, grader or custodian is a separate attestation.

License

Apache-2.0 OR MIT