Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 2.4% on npmjs.org
Top 1.7% downloads on npmjs.org
Top 3.2% dependent packages on npmjs.org
Top 3.7% dependent repos on npmjs.org
Top 2.1% forks on npmjs.org

npmjs.org : jose-browser-runtime

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes.

Registry - Source - JSON
purl: pkg:npm/jose-browser-runtime
Keywords: browser, bun, cloudflare-workers, decrypt, deno, encrypt, jose, jsonwebtoken, jwa, jwe, jwk, jwks, jws, jwt, node, sign, validate, verify
License: MIT
Latest release: 13 days ago
First release: about 3 years ago
Dependent packages: 6
Dependent repositories: 10
Downloads: 17,082 last month
Stars: 4,861 on GitHub
Forks: 299 on GitHub
Total Commits: 1395
Committers: 32
Average commits per author: 43.594
Development Distribution Score (DDS): 0.042
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Funding links: https://github.com/sponsors/panva
Last synced: 13 days ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk0aGgtcGpqZy1yd21y

Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime
Ecosystems: npm
Packages: jose-browser-runtime
Source: github
Published: about 3 years ago

Moderate

GSA_kwCzR0hTQS1qdjNnLWo1OGYtOW1xOc4AAu1m

JOSE vulnerable to resource exhaustion via specifically crafted JWE
Ecosystems: npm
Packages: jose-node-esm-runtime, jose-node-cjs-runtime, jose-browser-runtime, jose
Source: github
Published: over 1 year ago