npmpackage.info

Gathering detailed insights and metrics for cookie-signature

Other packages similar to cookie-signature

@types/cookie-signature

1.1.2

TypeScript definitions for cookie-signature

@tinyhttp/cookie-signature

2.1.1

HTTP cookie signing and unsigning

cookie-signature-edge

1.0.7

A package that sign and unsign cookies for Edge API Routes.

@nexterias/hono-cookie-signature

1.0.1

A library for cookie signing and verification using HMAC-SHA256 for Hono.

Gathering detailed insights and metrics for cookie-signature

cookie-signature - 1.2.2 | npmpackage.info

cookie-signature

cookie signing

1.2.2

190

MIT

JavaScript

422.00 B

7,027,548,310 3.3

Installations

npm install cookie-signature

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>=6.6.0

Node Version

12.22.12

NPM Version

8.19.4 Score

99.9

Supply Chain

67.3

Quality

80.4

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

24

Closed

12

Merged

12

Issues

Open

2

Total

26

Closed

24

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

visionmedia

Download Statistics

Total Downloads

7,027,548,310

Last Day

2,410,451

Last Week

38,649,095

Last Month

170,213,904

Last Year

1,634,201,076

GitHub Statistics

MIT License

190 Stars

67 Commits

36 Forks

6 Watchers

2 Branches

8 Contributors

Updated on Jun 21, 2025

Bundle Size

766.00 B

Minified

422.00 B

Minified + Gzipped

Bundlephobia

Maintainers

View All 8 Contributors

Package Meta Information

Latest Version

1.2.2

Package Id

cookie-signature@1.2.2

Unpacked Size

4.88 kB

Size

2.46 kB

File Count

NPM Version

8.19.4

Node Version

12.22.12

Published on

Oct 29, 2024

Total Downloads

Cumulative downloads

Total Downloads

7,027,548,310

Last Day

-1.7%

2,410,451

Compared to previous day

Last Week

-6.9%

38,649,095

Compared to previous week

Last Month

12.1%

170,213,904

Compared to previous month

Last Year

19.1%

1,634,201,076

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

mocha should

cookie-signature

Sign and unsign cookies.

Example

1var cookie = require('cookie-signature');
2
3var val = cookie.sign('hello', 'tobiiscool');
4val.should.equal('hello.DGDUkGlIkCzPz+C0B064FNgHdEjox7ch8tOBGslZ5QI');
5
6var val = cookie.sign('hello', 'tobiiscool');
7cookie.unsign(val, 'tobiiscool').should.equal('hello');
8cookie.unsign(val, 'luna').should.be.false;

License

MIT.

See LICENSE file for details.

Moderate

4.4/10

Summary

cookie-signature Timing Attack

Affected Versions

< 1.0.4

Patched Versions

1.0.4

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.3

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More