npmpackage.info

Gathering detailed insights and metrics for webcrypto-core

Other packages similar to webcrypto-core

@peculiar/webcrypto

1.5.0

A WebCrypto Polyfill for NodeJS

iron-webcrypto

1.2.1

a cryptographic utility for sealing-unsealing a JSON object using symmetric key encryption with message integrity verification

webcrypto-shim

0.1.7

Web Cryptography API shim for legacy browsers

isomorphic-webcrypto

2.3.8

webcrypto library for Node, React Native and IE11+

Gathering detailed insights and metrics for webcrypto-core

webcrypto-core

A input validation layer for WebCrypto polyfills.

1.8.1

MIT

TypeScript

306,534,469 4

Installations

npm install webcrypto-core

Pull Requests

Open

1

Total

45

Closed

6

Merged

38

Issues

Open

5

Total

24

Closed

19

Releases

Unable to fetch releases

Developer

PeculiarVentures

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

Yes

Node Version

20.17.0

NPM Version

10.8.2 Statistics

29 Stars

361 Commits

13 Forks

8 Watching

4 Branches

10 Contributors

Updated on 12 Nov 2024

Languages

TypeScript (99.29%)

JavaScript (0.71%)

Total Downloads

Cumulative downloads

Total Downloads

306,534,469

Last day

-2.7%

599,712

Compared to previous day

Last week

2.4%

3,090,743

Compared to previous week

Last month

1.2%

13,096,497

Compared to previous month

Last year

36.7%

155,687,088

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@peculiar/asn1-schema @peculiar/json-schema asn1js pvtsutils tslib

Dev Dependencies

@types/mocha @types/node @typescript-eslint/eslint-plugin @typescript-eslint/parser eslint mocha nyc rimraf rollup rollup-plugin-dts rollup-plugin-typescript2 ts-node typescript

Versions

webcrypto-core

We have created a number of WebCrypto polyfills including: node-webcrypto-ossl, node-webcrypto-p11, and webcrypto-liner. webcrypto-core was designed to be a common layer to be used by all of these libraries for input validation.

Unless you intend to create a WebCrypto polyfill this library is probably not useful to you.

Installing

npm install webcrypto-core

Example

Current examples shows how you can implement your own WebCrypt interface

1const core = require(".");
2const crypto = require("crypto");
3
4class Sha1Provider extends core.ProviderCrypto {
5
6  constructor() {
7    super();
8
9    this.name = "SHA-1";
10    this.usages = [];
11  }
12
13  async onDigest(algorithm, data) {
14    const hash = crypto.createHash("SHA1").update(Buffer.from(data)).digest();
15    return new Uint8Array(hash).buffer;
16  }
17
18}
19
20class SubtleCrypto extends core.SubtleCrypto {
21  constructor() {
22    super();
23
24    // Add SHA1 provider to SubtleCrypto
25    this.providers.set(new Sha1Provider());
26  }
27}
28
29class Crypto extends core.Crypto {
30
31  constructor() {
32    this.subtle = new SubtleCrypto();
33  }
34
35  getRandomValues(array) {
36    const buffer = Buffer.from(array.buffer);
37    crypto.randomFillSync(buffer);
38    return array;
39  }
40
41}
42
43const webcrypto = new Crypto();
44webcrypto.subtle.digest("SHA-1", Buffer.from("TEST MESSAGE"))
45  .then((hash) => {
46    console.log(Buffer.from(hash).toString("hex")); // dbca505deb07e1612d944a69c0c851f79f3a4a60
47  })
48  .catch((err) => {
49    console.error(err);
50  });

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

Packaging

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

6

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

5

Maintained

Determines if the project is "actively maintained".

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

4

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More