npmpackage.info

Gathering detailed insights and metrics for @peculiar/webcrypto

Other packages similar to @peculiar/webcrypto

@peculiar/x509

1.12.3

@peculiar/x509 is an easy to use TypeScript/Javascript library based on @peculiar/asn1-schema that makes generating X.509 Certificates and Certificate Requests as well as validating certificate chains easy

webcrypto-core

1.8.1

Common layer to be used by crypto libraries based on WebCrypto API for input validation.

@peculiar/asn1-schema

2.3.13

Decorators for ASN.1 schemas building

iron-webcrypto

1.2.1

a cryptographic utility for sealing-unsealing a JSON object using symmetric key encryption with message integrity verification

Gathering detailed insights and metrics for @peculiar/webcrypto

@peculiar/webcrypto

A WebCrypto Polyfill for NodeJS

1.5.0

185

MIT

TypeScript

305,033,845 3.6

Installations

npm install @peculiar/webcrypto

Pull Requests

Open

0

Total

34

Closed

6

Merged

28

Issues

Open

12

Total

41

Closed

29

Releases

Unable to fetch releases

Developer

PeculiarVentures

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

>=10.12.0

Typescript Support

Yes

Node Version

20.13.1

NPM Version

10.5.2 Statistics

185 Stars

234 Commits

23 Forks

10 Watching

2 Branches

6 Contributors

Updated on 14 Nov 2024

Languages

TypeScript (99.43%)

JavaScript (0.57%)

Total Downloads

Cumulative downloads

Total Downloads

305,033,845

Last day

-2.8%

594,383

Compared to previous day

Last week

2.7%

3,069,432

Compared to previous week

Last month

0.9%

12,988,257

Compared to previous month

Last year

36.4%

156,049,280

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@peculiar/asn1-schema @peculiar/json-schema pvtsutils tslib webcrypto-core

Dev Dependencies

@peculiar/webcrypto-test @types/mocha @types/node @typescript-eslint/eslint-plugin @typescript-eslint/parser eslint eslint-plugin-import mocha rimraf rollup rollup-plugin-typescript2 ts-node typescript

Versions

@peculiar/webcrypto

We wanted to be able to write Javascript that used crypto on both the client and the server but we did not want to rely on Javascript implementations of crypto. The only native cryptography available in browser is Web Crypto, this resulted in us creating a @peculiar/webcrypto.

WARNING
Installing
Using
Examples
Bug Reporting
Related

WARNING

At this time this solution should be considered suitable for research and experimentation, further code and security review is needed before utilization in a production application.

Module is based on NodeJS v10 Crypto API. It would work only with Node v10 and higher.

Installing

npm install @peculiar/webcrypto

Supported algorithms

Algorithm name	generateKey	digest	export/import	sign/verify	encrypt/decrypt	wrapKey/unwrapKey	derive
SHA-1		X
SHA-256		X
SHA-384		X
SHA-512		X
HMAC	X		X	X
RSASSA-PKCS1-v1_5	X		X	X
RSAES-PKCS1-v1_5²	X		X		X	X
RSA-PSS	X		X	X
RSA-OAEP	X		X		X	X
AES-CMAC	X		X	X
AES-CBC	X		X		X	X
AES-CTR	X		X		X	X
AES-ECB	X		X		X	X
AES-GCM	X		X		X	X
AES-KW	X		X			X
ECDSA¹	X		X	X
ECDH¹	X		X				X
EdDSA^2,3	X		X	X
ECDH-ES^2,4	X		X				X
HKDF			X				X
PBKDF2			X				X
DES-CBC²	X		X		X	X
DES-EDE3-CBC²	X		X		X	X
shake128²		X
shake256²		X

¹ Mechanism supports extended list of named curves P-256, P-384, P-521, K-256, brainpoolP160r1, brainpoolP160t1, brainpoolP192r1, brainpoolP192t1, brainpoolP224r1, brainpoolP224t1, brainpoolP256r1, brainpoolP256t1, brainpoolP320r1, brainpoolP320t1, brainpoolP384r1, brainpoolP384t1, brainpoolP512r1, and brainpoolP512t1

² Mechanism is not defined by the WebCrypto specifications. Use of mechanism in a safe way is hard, it was added for the purpose of enabling interoperability with an existing system. We recommend against its use unless needed for interoperability.

³ Mechanism supports extended list of named curves Ed25519, and Ed448

⁴ Mechanism supports extended list of named curves X25519, and X448

Using

1const { Crypto } = require("@peculiar/webcrypto");
2
3const crypto = new Crypto();

Examples

See WebCrypto Docs for examples

Bug Reporting

Please report bugs either as pull requests or as issues in the issue tracker. @peculiar/webcrypto has a full disclosure vulnerability policy. Please do NOT attempt to report any security vulnerability in this code privately to anybody.

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Packaging

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

6

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/PeculiarVentures/webcrypto/publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/PeculiarVentures/webcrypto/publish.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/PeculiarVentures/webcrypto/publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/PeculiarVentures/webcrypto/publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/PeculiarVentures/webcrypto/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/PeculiarVentures/webcrypto/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/PeculiarVentures/webcrypto/test.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/PeculiarVentures/webcrypto/test.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:56
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:43
Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 2 third-party GitHubAction dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.6

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @peculiar/webcrypto

@peculiar/webcrypto

Installations

Pull Requests

0

34

6

28

Issues

12

41

29

Releases

Unable to fetch releases

Developer

PeculiarVentures

Developer Guide

CommonJS

>=10.12.0

Yes

20.13.1

10.5.2

Statistics

Languages

Total Downloads

305,033,845

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

@peculiar/webcrypto

Table Of Contents

WARNING

Installing

Supported algorithms

Using

Examples

Bug Reporting

Related

10

10

10

10

6

2

0

0

0

0

0

0

0

0

3.6

/10

Other packages similar to @peculiar/webcrypto