Gathering detailed insights and metrics for sha.js
Gathering detailed insights and metrics for sha.js
Installations
npm install sha.jsDeveloper Guide
BETA
Typescript
No
Module System
N/A
Node Version
9.8.0
NPM Version
5.7.1
Releases
Unable to fetch releases
Languages
1
JavaScript
JavaScript (100%)
Developer
crypto-browserify
Download Statistics
Total Downloads
4,080,530,017
Last Day
2,486,474
Last Week
13,466,162
Last Month
57,938,225
Last Year
644,781,791
GitHub Statistics
NOASSERTION License
291 Stars
271 Commits
60 Forks
6 Watchers
1 Branches
42 Contributors
Updated on Apr 13, 2025
Bundle Size
12.11 kB
Minified
4.21 kB
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
2.4.11
Package Id
sha.js@2.4.11
Size
9.74 kB
NPM Version
5.7.1
Node Version
9.8.0
Published on
Mar 20, 2018
Total Downloads
Cumulative downloads
Total Downloads
4,080,530,017
Dependencies
2
Dev Dependencies
5
sha.js
Node style SHA on pure JavaScript.
1var shajs = require('sha.js') 2 3console.log(shajs('sha256').update('42').digest('hex')) 4// => 73475cb40a568e8da8a045ced110137e159f890ac4da883b6b17dc651b3a8049 5console.log(new shajs.sha256().update('42').digest('hex')) 6// => 73475cb40a568e8da8a045ced110137e159f890ac4da883b6b17dc651b3a8049 7 8var sha256stream = shajs('sha256') 9sha256stream.end('42') 10console.log(sha256stream.read().toString('hex')) 11// => 73475cb40a568e8da8a045ced110137e159f890ac4da883b6b17dc651b3a8049
supported hashes
sha.js currently implements:
- SHA (SHA-0) -- legacy, do not use in new systems
- SHA-1 -- legacy, do not use in new systems
- SHA-224
- SHA-256
- SHA-384
- SHA-512
Not an actual stream
Note, this doesn't actually implement a stream, but wrapping this in a stream is trivial. It does update incrementally, so you can hash things larger than RAM, as it uses a constant amount of memory (except when using base64 or utf8 encoding, see code comments).
Acknowledgements
This work is derived from Paul Johnston's A JavaScript implementation of the Secure Hash Algorithm.
LICENSE MIT
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/browserify/.github/SECURITY.md:1
- Info: Found linked content: github.com/browserify/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/browserify/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/browserify/.github/SECURITY.md:1
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 7/22 approved changesets -- score normalized to 3
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/require-allow-edits.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/browserify/sha.js/require-allow-edits.yml/master?enable=pin
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/node-aught.yml:1
- Warn: no topLevel permission defined: .github/workflows/node-pretest.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/node-tens.yml:6
- Info: topLevel 'contents' permission set to 'read': .github/workflows/node-twenties.yml:6
- Warn: no topLevel permission defined: .github/workflows/rebase.yml:1
- Warn: no topLevel permission defined: .github/workflows/require-allow-edits.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 15 are checked with a SAST tool
Score
4.3
/10
Last Scanned on 2025-05-05
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More