Is xmldsigjs safe to use?

xmldsigjs has no known vulnerabilities on the latest version (2.8.7). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of xmldsigjs?

The latest version of xmldsigjs is 2.8.7, released 2026-04-10.

Does xmldsigjs have known vulnerabilities?

No known vulnerabilities on the latest version of xmldsigjs.

Is xmldsigjs deprecated?

No, xmldsigjs is actively maintained. Latest release: 2.8.7 (2026-04-10).

What are alternatives to xmldsigjs?

Popular alternatives to xmldsigjs in npm include: semver, debug, minimatch, ansi-styles, brace-expansion.

What license does xmldsigjs use?

xmldsigjs is licensed under MIT.

xmldsigjs

npmv2.8.7

XML Digital Signature implementation in TypeScript/JavaScript using Web Crypto API

License MITpermissive55 versions2 maintainers7 deps

PeculiarVentures/xmldsigjs

/ 100

Health

safe to use

[email protected] is safe to use (health: 69/100)

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

440.6 KBminified

93.3 KB gzipped

7 direct dependencies

ESM

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

asn1js pkijs pvtsutils pvutils tslib xml-core xpath

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/xmldsigjs