</>PackageGraphPackageGraph

keygrip

npmv1.1.0

Key signing and verification for rotated credentials

Not recommended for new projects

No — keygrip should not be adopted for new projects. Last published 2682 days ago.

  • ?Adoption: grade ?, Not reported by this registry.

    No download data reported for this package yet.

  • FMaintenance: grade F, Failing.

    Last published 2682 days ago.

  • AWeight: grade A, Excellent.

    Pulls in 1 transitive package, about 15 KB installed.

  • ASupply chain: grade A, Excellent.

    No install scripts, 4 maintainers, and a contained dependency surface.

  • ALicense: grade A, Excellent.

    MIT — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding keygrip to a project.

1
Direct dependencies

Runtime packages this one declares itself.

1
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

15 KB
Install size

Unpacked size of this package plus its entire runtime tree.

1
Tree depth

Longest resolved dependency chain below this package.

Licenses in the dependency tree

MIT

Every license you inherit by installing keygrip, not just its own. Check this before a legal review, not after.

Compatibility

Node.js
node >= 0.6
Module format
CommonJS only
TypeScript
No bundled types
Install scripts
None

Quick start

A usage example from the keygrip README.

javascriptFull README ↗
keys = new Keygrip(["SEKRIT2", "SEKRIT1"])
keys = Keygrip(["SEKRIT2", "SEKRIT1"])
keys = require("keygrip")()
keys = Keygrip(["SEKRIT2", "SEKRIT1"], 'sha256', 'hex')
keys = Keygrip(["SEKRIT2", "SEKRIT1"], 'sha256')
keys = Keygrip(["SEKRIT2", "SEKRIT1"], undefined, 'hex')

Dependencies

Declared by keygrip v1.1.0. Runtime dependencies are installed with the package; dev dependencies are not.

Runtime (1)

tsscmp 1.0.6

Dev (2)

mocha 6.1.4nyc 14.0.0

Used by

Popular packages that depend on keygrip.

cookiesnpm

Cookies, optionally signed using Keygrip.

↓ 0/wk◈ 1 dependents⚖ MIT

Relationship graph

Dependencies (left) and dependents (right) of keygrip.

tsscmpcookieskeygrip
keygrip dependencies dependents

Frequently installed together

eslintnpm

An AST-based pattern checker for JavaScript.

↓ 138.4M/wk◈ 279 dependents⚖ MITTS
depdnpm

Deprecate all the things

↓ 103.8M/wk◈ 4 dependents⚖ MIT
expressnpm

Fast, unopinionated, minimalist web framework

↓ 92.8M/wk◈ 17 dependents⚖ MIT

Release history

No releases in the last two years, typically about 106 days apart.

Recent versions of keygrip
VersionPublishedSizeLicense
1.1.0latest7 years ago7.3 KBMIT
1.0.38 years ago7.7 KBMIT
1.0.29 years ago—MIT
1.0.112 years ago—MIT
1.0.012 years ago—MIT
0.2.413 years ago—MIT
0.2.313 years ago—MIT
0.2.214 years ago—MIT
0.2.114 years ago—MIT
0.2.014 years ago—MIT
0.1.715 years ago—MIT
0.1.615 years ago—MIT
0.1.315 years ago—MIT
0.1.215 years ago—MIT
0.1.115 years ago—MIT

Overview

keygrip is an npm package that key signing and verification for rotated credentials. It has 1 known dependents in the graph. The latest version is 1.1.0, released under the MIT license.

Who should use it

Teams working in the npm ecosystem who need key signing and verification for rotated credentials and value a focused solution.

When not to use it

Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.

Pros

  • Clear open-source license (MIT).
  • Lean dependency tree (3 direct dependencies).

Cons

  • No bundled TypeScript types (may require a separate @types package).

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

dougwilsonfishrock123jedjongleberry

Frequently asked questions

Should I use keygrip?

No — keygrip should not be adopted for new projects. Last published 2682 days ago.

How do I install keygrip?

Run `npm install keygrip` to add keygrip to your npm project.

How many dependencies does keygrip have?

keygrip declares 3 direct dependencies and pulls in 1 packages in total once its runtime tree is resolved totalling about 15 KB on disk.

What license is keygrip released under?

keygrip is distributed under the MIT license.

How popular is keygrip?

npm does not publish download counts. Within PackageGraph's crawl, 1 known packages depend on keygrip.

Is keygrip still maintained?

The most recent release of keygrip (v1.1.0) was published 7 years ago.

Does keygrip run install scripts?

No. keygrip does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.