Installations

npm install seed-fingerprint

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, ESM

Node Version

22.14.0

NPM Version

11.2.0 Pull Requests

Open

0

Total

0

Closed

0

Issues

Open

0

Total

0

Closed

0

Releases

Unable to fetch releases

Languages

2

TypeScript

JavaScript

TypeScript (97.37%)

JavaScript (2.63%)

Developer

izure1

Download Statistics

Total Downloads

2,659

Last Day

1

Last Week

2

Last Month

55

Last Year

497

GitHub Statistics

MIT License

8 Stars

26 Commits

2 Watchers

1 Branches

1 Contributors

Updated on Apr 10, 2025

Maintainers

1

View All 1 Contributors

Package Meta Information

Latest Version

2.0.1

Package Id

seed-fingerprint@2.0.1

Unpacked Size

111.87 kB

Size

27.38 kB

File Count

19

NPM Version

11.2.0

Node Version

22.14.0

Published on

Apr 09, 2025

Total Downloads

Cumulative downloads

Total Downloads

2,659

Last Day

-50%

1

Compared to previous day

Last Week

-93.9%

2

Compared to previous week

Last Month

41%

55

Compared to previous month

Last Year

82.1%

497

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

1

hash.js

Dev Dependencies

3

copyfiles esbuild typescript

seed-fingerprint

seed-fingerprint is a library that creates a hash that can identify users based on seeds.

The library has gained a lot of inspiration from the https://github.com/fingerprintjs/fingerprintjs, and https://github.com/pjanczyk/simple-fingerprint libraries. Thank you.

For example, you may want to use fingerprints instead of tokens, but the user's finger prints can get the same value on all websites. It is not good for security because the attacker can steal the user's finger print.

seed-fingerprint uses seeds to generate a hash that can identify the user.

Demo

https://izure1.github.io/seed-fingerprint

Usage

Node.js (cjs)

1import { create } from 'seed-fingerprint';
2
3const seed = 'hello';
4const fingerprint = create(seed);
5
6const id = await fingerprint.get();

Browser (esm)

1<script type="module">
2  import { create } from 'https://cdn.jsdelivr.net/npm/seed-fingerprint@2/+esm'
3
4  const seed = 'hello';
5  const fingerprint = create(seed);
6
7  const id = await fingerprint.get();
8</script>

fingerprint has the following components: Each component returns a promise.

You can specify components to exclude using the option.excludes argument when calling the create function. For example, the header component requires an internet connection. Therefore, you can exclude this component by writing create(seed, { excludes: ['header'] }).

1SeedFingerprint {
2  component: {
3    canvas: {
4      canvas2dRender: string
5    },
6    date: {
7      timezoneOffset: number
8      timezone: string
9    },
10    font: {
11      availableFonts: string[]
12    },
13    header: {
14      agent: {
15        ip: string
16        loc: string
17      }
18    },
19    navigator: {
20      cookieEnabled: boolean
21      hardwareConcurrency: number
22      maxTouchPoints: number
23      language: string
24    },
25    screen: {
26      colorDepth: number
27      width: number
28      height: number
29      devicePixelRatio: number
30    },
31    webgl: {
32      webglRenderer: string
33      webglRender: string
34    },
35    audio: {
36      fingerprint: string
37    },
38    crypto: {
39      hex: string
40    },
41    connection: {
42      information: {
43        effectiveType: string
44        downlink: number
45        rtt: number
46        saveData: boolean
47      }|null
48    }
49  }
50}

LICENSE

MIT LICENSE

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

SAST

Determines if the project uses static code analysis.

10

License

Determines if the project has defined a license.

9

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Maintained

Determines if the project is "actively maintained".

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

4.8

/10

Last Scanned on 2025-07-14

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More