// the take
A thin P/Invoke-style wrapper that lets Unity3d projects call libsodium for crypto primitives (box, secretbox, signing, hashing, etc.) across iOS, Android, macOS, Windows, and WebGL. It's for Unity developers who need real crypto (not Unity's bundled nothing) without hand-rolling native plugin builds for five platforms themselves.
Ships prebuilt native binaries for every major Unity target (Android arm/x86 variants, iOS xcframework, WebGL static lib) so you don't need platform toolchains just to use crypto. Delegates to upstream libsodium rather than reimplementing primitives, which is the right call for anything security-sensitive. Installable as a normal UPM git package with version pinning via the URL fragment, so it drops into an existing Unity project cleanly.
Tiny adoption (18 stars, 6 forks) means almost no field testing of the P/Invoke marshaling across all five platform targets — binding bugs around buffer lifetimes or struct layout are exactly the kind of thing that only surfaces with real usage. The README documents installation but not the actual C# API surface or which libsodium functions are wrapped, so you can't tell what's covered without reading the source. Native binary updates live in a separate repo (prebuilt-libsodium), which means tracking libsodium CVEs requires watching two repos and trusting that rebuilds happen promptly. No CI or test suite visible in the tree, which is a real gap for a crypto binding where a silent marshaling error is worse than a crash.
We read the README, the directory tree and a key source file in October 2026. Nobody pays to be listed. How we judge →