Is string-crypto safe to use?

string-crypto has no known vulnerabilities on the latest version (3.0.2). DepScope rates its health at 45/100 (high risk).

What is the latest version of string-crypto?

The latest version of string-crypto is 3.0.2, released 2024-04-19.

Does string-crypto have known vulnerabilities?

No known vulnerabilities on the latest version of string-crypto.

Is string-crypto deprecated?

No, string-crypto is actively maintained. Latest release: 3.0.2 (2024-04-19).

What are alternatives to string-crypto?

Popular alternatives to string-crypto in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does string-crypto use?

string-crypto is licensed under Apache-2.0.

string-crypto

npmv3.0.2

Small, simple, and secure no-dependency library to encrypt and decrypt strings using PBKDF2 for key derivation and AES (defaulted to 256-bit / SHA512)

License Apache-2.0permissive11 versions1 maintainers0 deps1,169 weekly dl

simplyhexagonal/string-crypto

/ 100

Health

use with caution

[email protected] low health (45/100) — consider alternatives

Moderate health score (45/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/string-crypto