I built a library to simplify Digital ID verification because existing protocols are overcomplicated and locked behind expensive ISO specs.

I think the recent Tea app fiasco is a good enough example for why uploading your full ID everywhere is a terrible idea. That's partly why I'm a fan of mobile ids with selective disclosure (e.g. proving you're over 21 without revealing your actual birthdate).

Unfortunately, besides the existing protocols being inaccessible and complex, there are already 4 different credential formats that you might want to support, and there's no automated process for verifying that the ID actually came from an issuer you trust. So I built this library to abstract out the protocols, various formats, and automatically verify the ID against trusted issuer lists like the AAMVA DTS or my wrapper for Apple's recommended IACA certs. Issuer info is indexed on an open source trusted-issuer-registry that I also built that automatically fetches the latest information from supported trust lists.

Hope someone finds it useful, and would love any feedback folks have!