noble-post-quantum
A minimal JavaScript implementation of ML-KEM, ML-DSA, SLH-DSA and Falcon, with no dependencies.
Why this is listed
The package is nothing but ML-KEM, ML-DSA, SLH-DSA and Falcon in readable TypeScript under MIT, so the implementation is the product rather than a feature inside one.
The repository describes noble-post-quantum as an auditable and minimal JavaScript implementation of post-quantum public-key cryptography. It lists ML-KEM from FIPS 203, ML-DSA from FIPS 204, SLH-DSA from FIPS 205, Falcon from its Round 3 specification, and hybrid constructions combining classical and post-quantum algorithms. It states that correctness is checked with ACVP and Wycheproof test vectors, and that unused code is excluded from a consuming build.
It is published under MIT as one of the noble libraries, a family the project describes as having zero or minimal dependencies, readable TypeScript, and PGP-signed releases. Its own security section states that the library has not been independently audited yet. That is worth reading directly, because auditable in the project's own description is a claim about how the code is written rather than a record of an audit having happened, and the two are easy to run together.
Sources
Checked against these sources on Sep 4, 2026. Listing is not endorsement, and nothing here is ranked or scored.