oauth-sign
npmv0.9.0OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.
Not recommended for new projects
No — oauth-sign should not be adopted for new projects. Last published 2960 days ago.
- AAdoption: grade A, Excellent.
14.7M downloads per week and 1 known dependents.
- FMaintenance: grade F, Failing.
Last published 2960 days ago.
- AWeight: grade A, Excellent.
Zero runtime dependencies, about 13 KB installed.
- ASupply chain: grade A, Excellent.
No install scripts, 3 maintainers, and a contained dependency surface.
- ALicense: grade A, Excellent.
Apache-2.0 — permissive, with no copyleft found in the dependency tree.
Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.
Install cost
What you actually take on by adding oauth-sign to a project.
Runtime packages this one declares itself.
Distinct packages in the full runtime tree, deduplicated the way a package manager would.
Unpacked size of this package plus its entire runtime tree.
Longest resolved dependency chain below this package.
Compatibility
- Node.js
- node *
- Module format
- CommonJS only
- TypeScript
- No bundled types
- Install scripts
- None
Used by
Popular packages that depend on oauth-sign.
Relationship graph
Dependencies (left) and dependents (right) of oauth-sign.
Frequently installed together
RFC9562 UUIDs
The ultimate javascript content-type utility.
Port of jQuery.extend for node.js and the browser
Like JSON.stringify, but doesn't blow up on circular refs.
Signs and prepares requests using AWS Signature Version 4
Reference implementation of Joyent's HTTP Signature scheme.
Caseless object set/get/has, very useful when working with HTTP headers.
AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.
Extremely fast HTTP Archive (HAR) validator using JSON Schema
Detect whether or not an object is a Typed Array
A library to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications.
A stream that emits multiple other streams one after another.
Release history
No releases in the last two years, typically about 95 days apart.
| Version | Published | Size | License |
|---|---|---|---|
| 0.9.0latest | 8 years ago | 13 KB | Apache-2.0 |
| 0.8.2 | 10 years ago | — | Apache-2.0 |
| 0.8.1 | 10 years ago | — | Apache-2.0 |
| 0.8.0 | 11 years ago | — | Apache-2.0 |
| 0.7.0 | 11 years ago | — | Apache-2.0 |
| 0.6.0 | 11 years ago | — | Apache-2.0 |
| 0.5.0 | 12 years ago | — | Apache-2.0 |
| 0.4.0 | 13 years ago | — | Apache-2.0 |
| 0.3.0 | 13 years ago | — | Apache-2.0 |
| 0.2.0 | 13 years ago | — | Apache-2.0 |
Overview
oauth-sign is an npm package that oAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module. It is extremely widely used, with about 14.7M downloads per week and 1 known dependents in the graph. The latest version is 0.9.0, released under the Apache-2.0 license.
Who should use it
Teams working in the npm ecosystem who need oAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module and value a battle-tested, widely-adopted solution.
When not to use it
Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.
Pros
- Large, well-established user base (14.7M weekly downloads).
- Clear open-source license (Apache-2.0).
- Zero runtime dependencies — minimal footprint.
Cons
- No bundled TypeScript types (may require a separate @types package).
Auto-generated from collected registry metadata. No external claims are inferred.
Frequently asked questions
Should I use oauth-sign?
No — oauth-sign should not be adopted for new projects. Last published 2960 days ago.
How do I install oauth-sign?
Run `npm install oauth-sign` to add oauth-sign to your npm project.
What license is oauth-sign released under?
oauth-sign is distributed under the Apache-2.0 license.
How popular is oauth-sign?
oauth-sign has approximately 14,656,781 downloads per week and 1 known dependent packages.
Is oauth-sign still maintained?
The most recent release of oauth-sign (v0.9.0) was published 8 years ago.
Does oauth-sign run install scripts?
No. oauth-sign does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.