# \#security

**URL:** https://clojureverse.org/tag/security/76.md

[Latest](https://clojureverse.org/latest.md) · [Categories](https://clojureverse.org/categories.md) · [Tags](https://clojureverse.org/tags.md)

---

## [\[ANN\] Kotoba: a Clojure-shaped language that compiles to WebAssembly, with capability-based safety (feedback wanted)](https://clojureverse.org/t/ann-kotoba-a-clojure-shaped-language-that-compiles-to-webassembly-with-capability-based-safety-feedback-wanted/14949)

<div class="topic-metadata">

**Author:** [@com-junkawasaki](https://clojureverse.org/u/com-junkawasaki)\
**Replies:** 3\
**Last updated:** [July 23, 2026, 7:37am UTC](https://clojureverse.org/t/ann-kotoba-a-clojure-shaped-language-that-compiles-to-webassembly-with-capability-based-safety-feedback-wanted/14949 "2026-07-23T07:37:31Z")

</div>

What Kotoba is Kotoba is a small Clojure-shaped language profile for compiling capability-checked programs to WebAssembly. It’s aimed at code that should be inspectable, portable, and constrained: AI-generated cells, san…

---

## [Any way to manipulate yada.security/verify ctx?](https://clojureverse.org/t/any-way-to-manipulate-yada-security-verify-ctx/8295)

<div class="topic-metadata">

**Author:** [@tomekw](https://clojureverse.org/u/tomekw)\
**Replies:** 0\
**Last updated:** [October 22, 2021, 12:38pm UTC](https://clojureverse.org/t/any-way-to-manipulate-yada-security-verify-ctx/8295 "2021-10-22T12:38:07Z")

</div>

I’ve a yada.security/verify multimethod implementation that checks and verifies JWT auth token from a session cookie. The multimethod accepts ctx and the auth scheme parameters. I would like to manipulate the ctx to set …

---

## [Clojars: Verified Group Names](https://clojureverse.org/t/clojars-verified-group-names/7297)

<div class="topic-metadata">

**Author:** [@seancorfield](https://clojureverse.org/u/seancorfield)\
**Replies:** 9\
**Last updated:** [July 27, 2021, 5:53am UTC](https://clojureverse.org/t/clojars-verified-group-names/7297 "2021-07-27T05:53:23Z")

</div>

In light of the recent announcement of a method to inject libraries into internal builds by shadowing internal names (aka ‘Dependency Confusion’), we have decided to take steps to make Clojars more secure. Clojars will …