gmb-lib

The shared libraries behind the go make bytes services and applications. One correct implementation of each cross-cutting concern — service wiring, authentication, audit trails, eIDAS signature formats, eID cards and the design system — imported by every product instead of rewritten per service.

The libraries

Repository	What it is
go-platform-kit	The platform glue over Azugo every backend service imports — config, telemetry, errors, correlation and broker access wired identically
go-authbyte	In-process auth client for Go services — validates DPoP-bound tokens from the authbyte issuer and gates handlers by scope and level
go-web-eid	Native Go Web eID back end — authentication-token validation and eID-card signing operations, wire-compatible with the browser stack
go-asice	Framework-agnostic library for assembling and inspecting ASiC-E containers that hold XAdES signatures (ETSI EN 319 162-1)
go-csc	Client for remote signing services that speak the Cloud Signature Consortium API v2 — the standard as written, each provider's particulars in a small profile, how the person is authenticated left to the caller
go-validation-answer	Normalizes qualified signature-validation reports into one stable, wire-ready answer, so every service and UI renders the same fields
go-docgate	Document admission gate — a cheap, deterministic check on untrusted uploads before storage, rendering or a remote service touches them
go-eidas-audit	Signing-evidence emitter — one correct way for a signing service to publish schema-correct events into the hash-chained eIDAS audit trail
go-gdpr-audit	GDPR access-audit client — every service that touches personal data records who accessed whose data, when, why and on what lawful basis
go-sec-events	NIS2 security-event emitter — one standard shape for auth, authorization, proof, egress and secret-handling events shipped to a SIEM
uibyte	The design system behind the applications, as code — role-named tokens, the application shell and the accessible primitives every single-page app uses

The services that compose these libraries live in go-make-bytes, and the open-source qualified signing platform built on top of both is signbyte.

Use it

Every library is versioned and released as a git tag; develop is the default branch you land on, so read a tag rather than a branch tip for released behaviour.

go get github.com/gmb-lib/go-platform-kit@v1.11.1

uibyte installs from git by tag as well — there is no registry release and no floating version:

npm install github:gmb-lib/uibyte#v0.3.0

Each repository's README documents its API, its configuration and where it fits.

Licence, contributing, security

MIT across the organisation — copyright SIA "Go Make Bytes". Issues are welcome on every repository; each one carries a CONTRIBUTING.md describing how it is built and tested. Anything exploitable goes through private vulnerability reporting on the affected repository, never a public issue — see its SECURITY.md.