</>PackageGraphPackageGraph

bufferutil

npmv4.1.0

WebSocket buffer utils

Adopt with care

bufferutil is usable, with caveats. This package runs an install script on your machine.

  • ?Adoption: grade ?, Not reported by this registry.

    No download data reported for this package yet.

  • BMaintenance: grade B, Good.

    Last published 265 days ago. 2 releases in the last 2 years.

  • AWeight: grade A, Excellent.

    Pulls in 1 transitive package, about 356 KB installed.

  • CSupply chain: grade C, Fair — worth a look.

    This package runs an install script on your machine.

  • ALicense: grade A, Excellent.

    MIT — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding bufferutil to a project.

1
Direct dependencies

Runtime packages this one declares itself.

1
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

356 KB
Install size

Unpacked size of this package plus its entire runtime tree.

1
Tree depth

Longest resolved dependency chain below this package.

Licenses in the dependency tree

MIT

Every license you inherit by installing bufferutil, not just its own. Check this before a legal review, not after.

Compatibility

Node.js
node >=6.14.2
Module format
CommonJS only
TypeScript
No bundled types
Install scripts
Runs on install

Installing this package executes a script defined by its publisher. That is normal for native modules, but it is also how supply-chain attacks run — review it before installing in CI or on a machine with credentials.

Quick start

A usage example from the bufferutil README.

'use strict';

const bufferUtil = require('bufferutil');
const crypto = require('crypto');

const source = crypto.randomBytes(10);
const mask = crypto.randomBytes(4);

bufferUtil.mask(source, mask, source, 0, source.length);

Dependencies

Declared by bufferutil v4.1.0. Runtime dependencies are installed with the package; dev dependencies are not.

Dev (3)

mocha ^11.0.1node-gyp ^12.1.0prebuildify ^6.0.0

Used by

Popular packages that depend on bufferutil.

Relationship graph

Dependencies (left) and dependents (right) of bufferutil.

node-gyp-build@vercel/postgresbufferutil
bufferutil dependencies dependents

Frequently installed together

Release history

2 releases in the last two years, typically about 89 days apart.

Recent versions of bufferutil
VersionPublishedSizeLicense
4.1.0latest8 months ago343 KBMIT
4.0.91 year ago363 KBMIT
4.0.82 years ago404 KBMIT
4.0.73 years ago400 KBMIT
4.0.64 years ago397 KBMIT
4.0.54 years ago397 KBMIT
4.0.45 years ago426 KBMIT
4.0.35 years ago283 KBMIT
4.0.25 years ago908 KBMIT
4.0.17 years ago513 KBMIT
4.0.08 years ago261 KBMIT
3.0.58 years ago7.6 KBMIT
3.0.48 years ago7.6 KBMIT
3.0.3-napi8 years agoMIT
3.0.38 years agoMIT

Overview

bufferutil is an npm package that webSocket buffer utils. It has 1 known dependents in the graph. The latest version is 4.1.0, released under the MIT license.

Who should use it

Teams working in the npm ecosystem who need webSocket buffer utils and value a focused solution.

When not to use it

Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.

Pros

  • Clear open-source license (MIT).

Cons

  • No bundled TypeScript types (may require a separate @types package).

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

Keywords

Frequently asked questions

Should I use bufferutil?

bufferutil is usable, with caveats. This package runs an install script on your machine.

How do I install bufferutil?

Run `npm install bufferutil` to add bufferutil to your npm project.

How many dependencies does bufferutil have?

bufferutil declares 4 direct dependencies and pulls in 1 packages in total once its runtime tree is resolved totalling about 356 KB on disk.

What license is bufferutil released under?

bufferutil is distributed under the MIT license.

How popular is bufferutil?

npm does not publish download counts. Within PackageGraph's crawl, 1 known packages depend on bufferutil.

Is bufferutil still maintained?

The most recent release of bufferutil (v4.1.0) was published 8 months ago.

Does bufferutil run install scripts?

Yes. bufferutil defines a lifecycle script that executes when the package is installed. Review it before installing in CI or on a machine holding credentials.