A simple history tracker for the public JSON files used by Quebec's VaxiCode applications to verify vaccination status.
The most recent files can be found on the vaxi branch.
The vaxi.json tracking starts with the very first public version at the time of release in August 2021. It may be missing some updates done between that time and November 2021. The trust-vaxicode.json tracking started mid-january 2022. Both files are be automatically monitored for changes 4 times per day.
The vaxi.json file is publicly hosted on the Web and is used by the VaxiCode applications to determine whether the data in a valid QR code is an acceptable vaccination status. For example, it indicates that having two doses of the vaccine is good (green).
Code formatting is done on the file when it's retrieved to make it more readable and the two fields g and v are automatically stripped out. These fields contain a timestamp and some metadata on the applications and are not relevant here.
Parsing the file and explaining its content is beyond the scope of this project. You can try reading the file, JSON is a human-readable format even though most of the content itself is not very friendly.
The trust-vaxicode.json file is also publicly hosted on the Web and used by the VaxiCode application. It contains a list of trusted identities and their associated public keys that are valid to verify signed QR codes. This includes the entities that are part of the CommonTrust Network registry (the government of Quebec is part of that network).
Code formatting is done on the file when it's retrieved to make it more readable and the timestamp field d is automatically stripped out.
This repository was not made with bad intent. It simply contains a copy of the publicly hosted file so that the change history can easily be navigated. This gives absolutely no useful information for counterfeiting vaccine proofs because it should simply be a coded representation of the latest accepted vaccination status along with public keys which can't be used to sign vaccine proofs.
I am in no way associated with the Government of Quebec or the people who make VaxiCode. This is my own personal effort and has nothing to do with the company I work for either.
If you work for the Government and think this should not exist, please contact me. My email can be found on my profile page.