Billium Node — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Billium Node (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Official client libraries for Billium — non-custodial crypto payments, invoices, and webhooks.
| Package | Version | Description |
|---|---|---|
@billium/node | Node.js SDK — invoices, webhook signature verification, webhook management | |
@billium/mcp | MCP server — manage invoices and webhooks from Claude, Cursor, and any MCP host |
Additional language SDKs will live as siblings under packages/ as they ship.
npm install @billium/nodeimport { Billium } from '@billium/node';
const billium = new Billium({
apiKey: process.env.BILLIUM_API_KEY,
merchantId: process.env.BILLIUM_MERCHANT_ID,
webhookSecret: process.env.BILLIUM_WEBHOOK_SECRET,
});
const invoice = await billium.invoices.create(
{ name: 'Order #1234', rawAmount: 99.99 },
{ idempotencyKey: crypto.randomUUID() },
);See packages/node/README.md for the full Node.js SDK reference.
.
├── packages/
│ ├── node/ # @billium/node — TypeScript Node.js SDK
│ │ ├── src/ # Source
│ │ ├── tests/ # Vitest test suite
│ │ ├── README.md # Public-facing docs (rendered on npmjs.com)
│ │ └── CHANGELOG.md # Per-release notes
│ └── mcp/ # @billium/mcp — Model Context Protocol server
│ ├── src/ # Server + tool definitions
│ ├── tests/ # Vitest in-memory round-trip suite
│ └── README.md # Host setup (Claude Code, Cursor, …)
└── .github/
├── workflows/ # CI + release automation
├── ISSUE_TEMPLATE/ # Bug + feature request forms
└── CODEOWNERS # Review requirementsThis is an npm workspace. Run scripts from the repository root:
npm install # installs all workspace packages
npm run lint # typechecks every package (src + tests)
npm test # runs every package's test suite
npm run build # builds every packageTo work on a specific package, you can also cd packages/node && npm <script>.
Releases are published to npm by GitHub Actions when a v*.*.* tag is pushed:
packages/node/package.json#version and packages/node/src/version.ts#SDK_VERSION to the new version (CI verifies they match).packages/node/CHANGELOG.md describing the changes.main.git tag v1.0.1 && git push origin v1.0.1.npm publish with provenance.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.