# Vendored argon2id

- Package: `argon2id`
- Version: `1.0.1`
- Source: `https://www.npmjs.com/package/argon2id`
- Repository: `https://github.com/openpgpjs/argon2id`
- License: MIT, see `LICENSE`.

This package is vendored because the local npm registry path was unavailable during S09, while Server B runs Node.js 22 and does not expose built-in `crypto.argon2Sync`. The project code first uses Node's native Argon2id when present and falls back to this WASM implementation.

WASM SHA-256:

```text
dist/no-simd.wasm  1F16D8DE5A6D8A3A4FAD5885C4784F57713D3626FD7D55F852FD79ECADBC4F8E
dist/simd.wasm     50647E10FC8E0ADBA4F60726F3F0D77DB0E3C73516B05A83AD10390B3A8B4B0E
```