Gathering detailed insights and metrics for node-aead-crypto
Gathering detailed insights and metrics for node-aead-crypto
Installations
npm install node-aead-cryptoDeveloper
AlCalzone
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
>= 10
Typescript Support
Yes
Node Version
18.13.0
NPM Version
8.19.3
Statistics
2 Stars
113 Commits
4 Forks
2 Watching
3 Branches
1 Contributors
Updated on 21 Aug 2023
Languages
JavaScript (80.5%)
Rust (19.5%)
Total Downloads
Cumulative downloads
Total Downloads
570,958
Last day
-19.3%
92
Compared to previous day
Last week
69.7%
1,098
Compared to previous week
Last month
4.6%
3,457
Compared to previous month
Last year
-21.4%
41,061
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
13
node-aead-crypto-win32-x64-msvcnode-aead-crypto-darwin-x64node-aead-crypto-linux-x64-gnunode-aead-crypto-darwin-arm64node-aead-crypto-android-arm64node-aead-crypto-linux-arm64-gnunode-aead-crypto-linux-arm64-muslnode-aead-crypto-win32-arm64-msvcnode-aead-crypto-linux-arm-gnueabihfnode-aead-crypto-linux-x64-muslnode-aead-crypto-win32-ia32-msvcnode-aead-crypto-android-arm-eabinode-aead-crypto-darwin-universal
Dev Dependencies
3
Optional Dependencies
13
node-aead-crypto-win32-x64-msvcnode-aead-crypto-darwin-x64node-aead-crypto-linux-x64-gnunode-aead-crypto-darwin-arm64node-aead-crypto-android-arm64node-aead-crypto-linux-arm64-gnunode-aead-crypto-linux-arm64-muslnode-aead-crypto-win32-arm64-msvcnode-aead-crypto-linux-arm-gnueabihfnode-aead-crypto-linux-x64-muslnode-aead-crypto-win32-ia32-msvcnode-aead-crypto-android-arm-eabinode-aead-crypto-darwin-universal
Versions
node-aead-crypto
AEAD ciphers for Node.js and Electron
Note: This module is not necessary on NodeJS 10+ because you can now provide the authTagLength.
Supported ciphers
- AES-CCM
- AES-GCM
Usage
TODO
Changelog
3.0.1 (2023-01-26)
Migrated the codebase to Rust and N-API. This module is now using RustCrypto instead of OpenSSL due to a bug in the Rust OpenSSL bindings. This change should make it possible to use the module on Electron again, which still does not support AEAD ciphers natively.
2.2.2 (2022-12-15)
- (AlCalzone) Disable preinstall script entirely to support Electron environments
2.2.1 (2021-06-19)
- (AlCalzone) Update dependencies
2.2.0 (2020-01-27)
- (AlCalzone) Replaced the node version comparison in
preinstallwith a check if all ciphers are natively available
2.1.1 (2018-11-27)
- (AlCalzone) Dropped
node-pre-gypforprebuild
2.0.0 (2018-11-04)
- (AlCalzone) Rework the installation procedure to fail on Node 10+
1.1.6 (2018-09-19)
- (AlCalzone) Update node-pre-gyp dependency
1.1.4 (2018-06-28)
- (AlCalzone) Update node-pre-gyp dependency
1.1.3 (2018-04-30)
- (AlCalzone) Update dependency versions hoping to fix an installation error
1.1.0
- (AlCalzone) Support NodeJS 10, drop Node 9 from precompilation
1.0.5
- (AlCalzone) Fixed installation issues on RPi 1
1.0.4
- (AlCalzone) Fixed installation issues on RPi 1
1.0.3
- (AlCalzone) Drop Node 7 from precompilation, add Node 9
1.0.2
- (AlCalzone) fixed typescript definitions
1.0.0
- (AlCalzone) initial release
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
7 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-423w-p2w9-r7vq
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
Found 0/21 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/CI.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:378: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:388: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:400: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:256: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:280: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:282: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:311: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:313: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:326: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:363: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:425: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/AlCalzone/node-aead-crypto/CI.yml/master?enable=pin
- Info: 0 out of 28 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 6 third-party GitHubAction dependencies pinned
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
license file not detected
Details
- Warn: project does not have a license file
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact v2.2.0 not signed: https://api.github.com/repos/AlCalzone/node-aead-crypto/releases/23148107
- Warn: release artifact v2.1.4 not signed: https://api.github.com/repos/AlCalzone/node-aead-crypto/releases/14289345
- Warn: release artifact v2.2.0 does not have provenance: https://api.github.com/repos/AlCalzone/node-aead-crypto/releases/23148107
- Warn: release artifact v2.1.4 does not have provenance: https://api.github.com/repos/AlCalzone/node-aead-crypto/releases/14289345
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 17 are checked with a SAST tool
Score
2.3
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More