@noble/ciphers
Audited & minimal JS implementation of Salsa20, ChaCha and AES
84%
Total Score
67
100
94
100
100
Health Score Breakdown
The repository is owned by a user account rather than an organization, so the concentrated recent contribution pattern is not buffered by visible organizational backing.
Paulmillr made 31 of 32 recent commits, creating concentrated ownership; the second active contributor provides some compensation, but the project remains dependent on one primary maintainer.
The project uses TypeScript and npm build tooling, but no security-scanning tools were detected, leaving a modest verification gap despite other evidence of active maintenance.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10270 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @noble/ciphers is vulnerable to Improperly Implemented Security Check for Standard in versions 0.4.0 - 0.6.0. | 0.4.0 - 0.6.0 | Low |
AIKIDO-2024-10269 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @noble/ciphers is vulnerable to Generation of Error Message Containing Sensitive Information in versions 0.6.0 - 0.6.0. | 0.6.0 - 0.6.0 | Low |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 years ago
- Unpacked Size
- 0.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.