Is js-sha256 safe to use?

js-sha256 has no known vulnerabilities on the latest version (0.11.1). DepScope rates its health at 52/100 (high risk).

What is the latest version of js-sha256?

The latest version of js-sha256 is 0.11.1, released 2025-05-24.

No known vulnerabilities on the latest version of js-sha256.

No, js-sha256 is actively maintained. Latest release: 0.11.1 (2025-05-24).

Popular alternatives to js-sha256 in npm include: minimatch, chalk, commander, eslint-visitor-keys, ajv.

js-sha256 is licensed under MIT.

npmv0.11.1

A simple SHA-256 / SHA-224 hash function for JavaScript supports UTF-8 encoding.

License MITpermissive23 versions1 maintainers0 deps

/ 100

Health

safe to use

[email protected] is safe to use (health: 52/100)

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

🌟

0/10untyped

No type definitions available

Quality signals

Publish security

npm signed

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/js-sha256