Awarded for completing Hallucinated Package Names and the Attack Built On Them and passing its exam, demonstrating the ability to verify a package before adding it, to distinguish this attack class from typosquatting and dependency confusion, and to apply lockfile, registry, proxy and add time controls that prevent an invented dependency name from reaching a build.
Certificates are designed to be checked, not just displayed.
The credential is valid for 12 months from issue. Its public page states the expiry date, and renewing means passing the current exam again — so the credential always reflects the current material.
