Installations

npm install hawk

Pull Requests

Open

0

Total

103

Closed

29

Merged

74

Issues

Open

0

Total

192

Closed

192

Releases

18

v9.0.2

Published on 02 Apr 2024

v9.0.1

Published on 03 May 2022

v9.0.0

Published on 11 Dec 2020

v8.0.1

Published on 22 Oct 2020

v8.0.0

Published on 22 Oct 2020

v7.1.2

Published on 22 Oct 2020

View all 18 releases

Developer

mozilla

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

20.11.1

NPM Version

10.2.4 Statistics

1,906 Stars

388 Commits

169 Forks

59 Watching

2 Branches

37 Contributors

Updated on 15 Nov 2024

Bundle Size

36.87 kB

Minified

11.52 kB

Minified + Gzipped

Bundlephobia

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

1,289,644,550

Last day

2.3%

340,437

Compared to previous day

Last week

8.2%

2,220,057

Compared to previous week

Last month

68.7%

7,341,415

Compared to previous month

Last year

-11.2%

57,163,375

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

4

@hapi/b64 @hapi/boom @hapi/cryptiles @hapi/hoek

Dev Dependencies

2

@hapi/code @hapi/lab

Versions

[!Important] Mozilla has archived this repository because both the protocol and documentation have reached completion, with no further updates or changes necessary.

While the existing code will remain available for reference or fork, no further updates or support should be expected.

hawk

HTTP Holder-Of-Key Authentication Scheme.

Documentation of the protocol, and the JS API, is in https://github.com/mozilla/hawk/blob/main/API.md.

Ownership Changes

This was once hueniverse/hawk and relased as hawk. Then, after the 7.0.10 release, it was moved to the hapijs/hawk repository and released as @hapi/hawk. Hapi later de-supported the library, after releasing version 8.0.0. It has since been moved to mozilla/hawk and is again released as hawk. All of the intermediate versions are also relased as hawk.

Changes are represented in GitHub releases on this repository.

Mozilla maintains several Hawk implementations in different langauages, so it is likely to stay at Mozilla for some time.

This library is in "maintenance mode" -- no features will be added, and only security-related bugfixes will be applied.

Stable Version

The latest stable version of the package.

Stable Version

9.0.2

HIGH

3

HIGH

7.4/10

Summary

Uncontrolled Resource Consumption in Hawk

Affected Versions

< 9.0.1

Patched Versions

9.0.1

HIGH

7.5/10

Summary

Regular Expression Denial of Service in hawk

Affected Versions

>= 4.0.0, < 4.1.1

Patched Versions

4.1.1

HIGH

7.5/10

Summary

Regular Expression Denial of Service in hawk

Affected Versions

< 3.1.3

Patched Versions

3.1.3

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

License

Determines if the project has defined a license.

7

SAST

Determines if the project uses static code analysis.

4

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.3

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More