oauth-sign
npmv0.9.0OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.
Not recommended for new projects
No — oauth-sign should not be adopted for new projects. Last published 2911 days ago.
- ?Adoption: grade ?, Not reported by this registry.
No download data reported for this package yet.
- FMaintenance: grade F, Failing.
Last published 2911 days ago.
- AWeight: grade A, Excellent.
Zero runtime dependencies, about 13 KB installed.
- ASupply chain: grade A, Excellent.
No install scripts, 3 maintainers, and a contained dependency surface.
- ALicense: grade A, Excellent.
Apache-2.0 — permissive, with no copyleft found in the dependency tree.
Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.
Install cost
What you actually take on by adding oauth-sign to a project.
Runtime packages this one declares itself.
Distinct packages in the full runtime tree, deduplicated the way a package manager would.
Unpacked size of this package plus its entire runtime tree.
Longest resolved dependency chain below this package.
Compatibility
- Node.js
- node *
- Module format
- CommonJS only
- TypeScript
- No bundled types
- Install scripts
- None
Used by
Popular packages that depend on oauth-sign.
Relationship graph
Dependencies (left) and dependents (right) of oauth-sign.
Frequently installed together
A querystring parser that supports nesting and arrays, with a depth limit
A stream that emits multiple other streams one after another.
Signs and prepares requests using AWS Signature Version 4
A library to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications.
Implementation of Function.prototype.bind
Port of jQuery.extend for node.js and the browser
Reference implementation of Joyent's HTTP Signature scheme.
Implements performance.now (based on process.hrtime).
Detect whether or not an object is a Typed Array
Like JSON.stringify, but doesn't blow up on circular refs.
Caseless object set/get/has, very useful when working with HTTP headers.
HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.
Release history
No releases in the last two years, typically about 95 days apart.
| Version | Published | Size | License |
|---|---|---|---|
| 0.9.0latest | 8 years ago | 13 KB | Apache-2.0 |
| 0.8.2 | 10 years ago | — | Apache-2.0 |
| 0.8.1 | 10 years ago | — | Apache-2.0 |
| 0.8.0 | 11 years ago | — | Apache-2.0 |
| 0.7.0 | 11 years ago | — | Apache-2.0 |
| 0.6.0 | 11 years ago | — | Apache-2.0 |
| 0.5.0 | 11 years ago | — | Apache-2.0 |
| 0.4.0 | 13 years ago | — | Apache-2.0 |
| 0.3.0 | 13 years ago | — | Apache-2.0 |
| 0.2.0 | 13 years ago | — | Apache-2.0 |
Overview
oauth-sign is an npm package that oAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module. It has 1 known dependents in the graph. The latest version is 0.9.0, released under the Apache-2.0 license.
Who should use it
Teams working in the npm ecosystem who need oAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module and value a focused solution.
When not to use it
Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.
Pros
- Clear open-source license (Apache-2.0).
- Zero runtime dependencies — minimal footprint.
Cons
- No bundled TypeScript types (may require a separate @types package).
Auto-generated from collected registry metadata. No external claims are inferred.
Frequently asked questions
Should I use oauth-sign?
No — oauth-sign should not be adopted for new projects. Last published 2911 days ago.
How do I install oauth-sign?
Run `npm install oauth-sign` to add oauth-sign to your npm project.
What license is oauth-sign released under?
oauth-sign is distributed under the Apache-2.0 license.
How popular is oauth-sign?
npm does not publish download counts. Within PackageGraph's crawl, 1 known packages depend on oauth-sign.
Is oauth-sign still maintained?
The most recent release of oauth-sign (v0.9.0) was published 8 years ago.
Does oauth-sign run install scripts?
No. oauth-sign does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.