Is @isomorphic-pgp/sign-and-verify safe to use?

@isomorphic-pgp/sign-and-verify has no known vulnerabilities on the latest version (0.0.12). DepScope rates its health at 49/100 (high risk).

What is the latest version of @isomorphic-pgp/sign-and-verify?

The latest version of @isomorphic-pgp/sign-and-verify is 0.0.12, released 2018-11-24.

Does @isomorphic-pgp/sign-and-verify have known vulnerabilities?

No known vulnerabilities on the latest version of @isomorphic-pgp/sign-and-verify.

Is @isomorphic-pgp/sign-and-verify deprecated?

No, @isomorphic-pgp/sign-and-verify is actively maintained. Latest release: 0.0.12 (2018-11-24).

What are alternatives to @isomorphic-pgp/sign-and-verify?

Popular alternatives to @isomorphic-pgp/sign-and-verify in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @isomorphic-pgp/sign-and-verify use?

@isomorphic-pgp/sign-and-verify is licensed under MIT.

@isomorphic-pgp/sign-and-verify

npmv0.0.12

Create and verify OpenPGP signatures

License MITpermissive12 versions1 maintainers7 deps91,534 weekly dl

wmhilton/isomorphic-pgp

/ 100

Health

use with caution

@isomorphic-pgp/[email protected] low health (49/100) — consider alternatives

Moderate health score (49/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

47.2 KBminified

16.6 KB gzipped

7 direct dependencies

side effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (7)

@isomorphic-pgp/parser @isomorphic-pgp/util @wmhilton/crypto-hash array-buffer-to-hex isomorphic-textencoder jsbn sha.js

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@isomorphic-pgp/sign-and-verify