w3c/vcalm

View on GitHub

An HTTP API for performing verifiable credential lifecycle management.

Stars: 135
Forks: 53
Open beginner issues: 0
Indexed issues: 58
Avg merge: 7d 5h
Merged PRs (30d): 2

Dominant language: HTML
License: No license data
Last GitHub push: Sep 1, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

58 open issues indexed

`created` field is defined as a string? Open

i18n-needs-resolution

Difficulty 3/5 1-2 days Newbie friendliness 52/100

w3c/vcalm#725 · Opened Sep 17, 2026
Use more globally correct example; editorial nit Open

i18n-needs-resolution

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

w3c/vcalm#724 · Opened Sep 17, 2026
Documenting localizable text in examples Open

i18n-needs-resolution

Difficulty 3/5 1-2 days Newbie friendliness 62/100

w3c/vcalm#723 · Opened Sep 17, 2026
Review R41 on T38 Open

effort: low ready for PR threat-model

w3c/vcalm#722 · 1 assignee · Opened Sep 16, 2026
Add QR Code shoulder surfing to threat model Open

threat-model

Difficulty 4/5 3-5 days Newbie friendliness 48/100

w3c/vcalm#719 · Opened Sep 9, 2026
Question: should we add ipex to protocols list for KERI/ACDC ecosystem? Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

w3c/vcalm#718 · Opened Sep 8, 2026
Add example VPR that would be used with credentialOffer Open

ready for PR

w3c/vcalm#717 · 1 assignee · Opened Sep 8, 2026
Handle property duplication problem from oneOf pattern Open

ready for PR

w3c/vcalm#715 · 1 assignee · Opened Sep 1, 2026
Update threat-model/README.md to be VCALM specific Open

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

w3c/vcalm#714 · Opened Sep 1, 2026
Handling the unregistered `application/mdoc` media type. Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/vcalm#712 · Opened Aug 28, 2026
Add ephemeral requester-initiated exchanges profile Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/vcalm#710 · 4 comments · Opened Aug 25, 2026
Provide a mermaid diagram that illustrates interaction chaining Open

v1.0

w3c/vcalm#702 · 1 assignee · Opened Aug 11, 2026
Internationalization Self-Review Questionnaire for VCALM v1.0 Open

v1.0 v1.0-cr-blocker

w3c/vcalm#697 · 1 assignee · Opened Aug 11, 2026
Accessibility Self-Review Questionnaire for VCALM v1.0 Open

v1.0 v1.0-cr-blocker

w3c/vcalm#696 · 1 assignee · Opened Aug 11, 2026
Security and Privacy Self-Review Questionnaire for VCALM v1.0 Open

v1.0 v1.0-cr-blocker

w3c/vcalm#695 · 1 assignee · Opened Aug 11, 2026
Consider including `recipientPublicJwk` (or similarly named) property in VPR for encrypted responses Open

v1.0

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/vcalm#693 · Opened Aug 5, 2026
Include optional `credentialOffer` property in a VPR that announces VCs to be issued in step Open

pr exists v1.0 v1.0-cr-blocker

w3c/vcalm#689 · 1 comment · 1 assignee · Opened Aug 1, 2026
Consider normatively/non-normatively adding site display information in interaction URL response Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/vcalm#688 · Opened Jul 31, 2026
Resolve tension between Threat Model and Privacy & Security Considerations Open

effort: high pr exists threat-model v1.0 v1.0-cr-blocker

w3c/vcalm#687 · 1 assignee · Opened Jul 28, 2026
Add normative reference to `jsonata` definition. Open

w3c/vcalm#686 · 1 comment · 1 assignee · Opened Jul 28, 2026
Unify "protocol objects" language across threat model Open

effort: low threat-model

w3c/vcalm#678 · 1 assignee · Opened Jul 13, 2026
Should we reference VC API or VCALM when referencing the interaction mechanism? Open

needs-discussion threat-model

w3c/vcalm#677 · 1 assignee · Opened Jul 13, 2026
Add dfn links for DC API and VC API references in threat model Open

effort: low threat-model

w3c/vcalm#676 · 1 assignee · Opened Jul 13, 2026
Add DFD description Open

threat-model

w3c/vcalm#675 · 2 assignees · Opened Jul 13, 2026
Add W3C license to threat model copyright.txt and LICENSE files Open

effort: low threat-model

Difficulty 1/5 Under an hour Newbie friendliness 75/100

w3c/vcalm#674 · 2 comments · Opened Jul 13, 2026
Add response(s) to T28 Open

threat-model

w3c/vcalm#673 · 1 assignee · Opened Jul 13, 2026
Review T29 and potential responses Open

needs-discussion threat-model

w3c/vcalm#672 · 1 assignee · Opened Jul 13, 2026
Split T25 "Failure to Validate Verifier Results and Semantic Contexts" into two threats Open

threat-model

w3c/vcalm#671 · 1 comment · 1 assignee · Opened Jul 13, 2026
Refactor text for R21 to give more precise advice Open

effort: low threat-model

w3c/vcalm#670 · 1 assignee · Opened Jul 13, 2026
Unify "Misconfigured <Component> instance" threats Open

threat-model

w3c/vcalm#669 · 1 assignee · Opened Jul 13, 2026
Add tags to threats Open

effort: low threat-model

w3c/vcalm#668 · 1 assignee · Opened Jul 13, 2026
Update T10 response language to better reflect interaction URL purpose Open

effort: low threat-model

w3c/vcalm#667 · 1 assignee · Opened Jul 13, 2026
No way for an exchange participant to decline/terminate an exchange Open

effort: low v1.0

w3c/vcalm#664 · 3 comments · 1 assignee · Opened Jul 12, 2026
Define a query type for confidence methods in general Open

v1.0

Difficulty 5/5 Over a week Newbie friendliness 45/100

w3c/vcalm#660 · 2 comments · Opened Jul 2, 2026
Remote credential renderer use case Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

w3c/vcalm#648 · 3 comments · Opened Jun 16, 2026
Refine credential lifecycle diagram Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

w3c/vcalm#647 · 2 comments · Opened Jun 16, 2026
Expand error handling to workflows Open

v1.0

w3c/vcalm#637 · 2 comments · 1 assignee · Opened May 13, 2026
Create Threat Model for VCALM Open

effort: high pending close pr exists v1.0 v1.0-cr-blocker

w3c/vcalm#628 · 17 comments · 3 assignees · Opened Apr 14, 2026
Horizontal reviews for VCALM v1.0 Open

effort: high v1.0 v1.0-cr-blocker

w3c/vcalm#627 · 1 comment · 1 assignee · Opened Apr 14, 2026
Improve UX around OAS output in the main specification Open

effort: high v1.0

w3c/vcalm#606 · 2 comments · 1 assignee · Opened Mar 10, 2026
Add a multistep workflow example with branching steps generated from step templates Open

effort: high v1.0

w3c/vcalm#600 · 3 comments · 1 assignee · Opened Mar 2, 2026
Consider defining normative/non-normative workflow processing algorithm Open

effort: low pr exists v1.0 v1.0-cr-blocker

w3c/vcalm#596 · 2 comments · 2 reactions · 1 assignee · Opened Feb 23, 2026
Document `indexAllocator` in more detail Open

effort: low pr exists v1.0

w3c/vcalm#594 · 2 comments · 2 assignees · Opened Feb 10, 2026
Annotate example workflows in appendix Open

effort: low help wanted needs-discussion v1.0

w3c/vcalm#585 · 1 assignee · Opened Feb 3, 2026
Expressing predicates in presentation request Open

effort: high enhancement needs-discussion

w3c/vcalm#578 · 1 comment · 1 assignee · Opened Jan 13, 2026
Add normative algorithm for QueryByExample matching Open

effort: high ready for PR v1.0 v1.0-cr-blocker

w3c/vcalm#574 · 3 comments · 1 assignee · Opened Dec 16, 2025
Add sequence diagrams for issuance, presentation, and verification Open

effort: high pr exists v1.0

w3c/vcalm#561 · 9 comments · 1 assignee · Opened Oct 8, 2025
Add an 'Issue a VC' request example Open

effort: high enhancement needs-discussion

Difficulty 5/5 Over a week Newbie friendliness 35/100

w3c/vcalm#548 · 3 comments · 2 reactions · Opened Sep 1, 2025
Add example response to ZcapQuery request Open

effort: high ready for PR

Difficulty 2/5 1-3 hours Newbie friendliness 64/100

w3c/vcalm#547 · 2 comments · Opened Aug 6, 2025
Define `indexAllocator` in the specification Open

effort: high pr exists v1.0

w3c/vcalm#485 · 3 comments · 1 assignee · Opened May 20, 2025

w3c/vcalm

Get new issues in your inbox