Is bcryptjs safe to use?

bcryptjs has no known vulnerabilities on the latest version (3.0.3). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of bcryptjs?

The latest version of bcryptjs is 3.0.3, released 2025-11-02.

Does bcryptjs have known vulnerabilities?

No known vulnerabilities on the latest version of bcryptjs.

Is bcryptjs deprecated?

No, bcryptjs is actively maintained. Latest release: 3.0.3 (2025-11-02).

What are alternatives to bcryptjs?

Popular alternatives to bcryptjs in npm include: ?, ansi-styles, semver, brace-expansion, ms.

What license does bcryptjs use?

bcryptjs is licensed under BSD-3-Clause.

bcryptjs

npmv3.0.3

Optimized bcrypt in plain JavaScript with zero dependencies, with TypeScript support. Compatible to 'bcrypt'.

License BSD-3-Clausepermissive30 versions1 maintainers0 deps7,520,584 weekly dl

dcodeIO/bcrypt.js

/ 100

Health

use with caution

[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

19.7 KBminified

9.0 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.70critical

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/bcryptjs