</>PackageGraphPackageGraph

pkce-challenge

npmv6.0.0

Generate or verify a Proof Key for Code Exchange (PKCE) challenge pair

Safe to adopt

Yes — pkce-challenge scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 220 days ago. 3 releases in the last 2 years.

  • ?Adoption: grade ?, Not reported by this registry.

    No download data reported for this package yet.

  • BMaintenance: grade B, Good.

    Last published 220 days ago. 3 releases in the last 2 years.

  • AWeight: grade A, Excellent.

    Zero runtime dependencies, about 23 KB installed.

  • BSupply chain: grade B, Good.

    This package has a single maintainer (bus factor of 1).

  • ALicense: grade A, Excellent.

    MIT — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding pkce-challenge to a project.

0
Direct dependencies

Runtime packages this one declares itself.

0
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

23 KB
Install size

Unpacked size of this package plus its entire runtime tree.

—
Tree depth

Longest resolved dependency chain below this package.

Compatibility

Node.js
node >=16.20.0
Module format
ESM + CommonJS
TypeScript
No bundled types
Install scripts
None

Quick start

A usage example from the pkce-challenge README.

jsFull README ↗
import pkceChallenge from "pkce-challenge";

await pkceChallenge();

Dependencies

Declared by pkce-challenge v6.0.0. Runtime dependencies are installed with the package; dev dependencies are not.

Dev (8)

@types/jest ^29.5.0@types/node ^18.15.11cypress ^15.9.0diverge ^1.0.2esbuild ^0.25.2http-server ^14.1.1jest ^29.5.0typescript ^5.0.3

Used by

Popular packages that depend on pkce-challenge.

@modelcontextprotocol/sdknpm

Model Context Protocol implementation for TypeScript

↓ 0/wk◈ 1 dependents⚖ MIT
@modelcontextprotocol/clientnpm

Model Context Protocol implementation for TypeScript - Client package

↓ 0/wk◈ 2 dependents⚖ MITTS

Relationship graph

Dependencies (left) and dependents (right) of pkce-challenge.

@modelcontextprot…@modelcontextprot…pkce-challenge
pkce-challenge dependencies dependents

Frequently installed together

zodnpm

TypeScript-first schema declaration and validation library with static type inference

↓ 246.7M/wk◈ 13 dependents⚖ MITTS
eslintnpm

An AST-based pattern checker for JavaScript.

↓ 138.4M/wk◈ 279 dependents⚖ MITTS
prettiernpm

Prettier is an opinionated code formatter

↓ 114.2M/wk◈ 159 dependents⚖ MITTS
vitestnpm

Next generation testing framework powered by Vite

↓ 92.7M/wk◈ 129 dependents⚖ MITTS
josenpm

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

↓ 0/wk◈ 2 dependents⚖ MITTS
eventsourcenpm

WhatWG/W3C compliant EventSource client for Node.js and browsers

↓ 0/wk◈ 3 dependents⚖ MITTS
eventsource-parsernpm

Streaming, source-agnostic EventSource/Server-Sent Events parser

↓ 0/wk◈ 3 dependents⚖ MITTS
cross-spawnnpm

Cross platform child_process#spawn and child_process#spawnSync

↓ 0/wk◈ 9 dependents⚖ MIT
content-typenpm

Create and parse HTTP Content-Type header

↓ 191.4M/wk◈ 6 dependents⚖ MITTS
raw-bodynpm

Get and validate the raw body of a readable stream.

↓ 128.5M/wk◈ 3 dependents⚖ MITTS
expressnpm

Fast, unopinionated, minimalist web framework

↓ 92.8M/wk◈ 17 dependents⚖ MIT
corsnpm

Node.js CORS middleware

↓ 69.7M/wk◈ 6 dependents⚖ MIT

Release history

3 releases in the last two years, typically about 146 days apart.

Recent versions of pkce-challenge
VersionPublishedSizeLicense
6.0.0latest7 months ago23 KBMIT
5.0.19 months ago18 KBMIT
5.0.01 year ago14 KBMIT
4.1.02 years ago10 KBMIT
4.0.13 years ago6.5 KBMIT
4.0.03 years ago6.5 KBMIT
3.1.03 years ago12 KBMIT
3.0.04 years ago11 KBMIT
2.2.05 years ago8.6 KBMIT
2.1.06 years ago7.7 KBMIT
2.0.06 years ago6.5 KBMIT
1.0.37 years ago3.6 KBMIT
1.0.27 years ago3.6 KBMIT
1.0.17 years ago2.7 KBMIT
1.0.07 years ago2.5 KBMIT

Overview

pkce-challenge is an npm package that generate or verify a Proof Key for Code Exchange (PKCE) challenge pair. It has 2 known dependents in the graph. The latest version is 6.0.0, released under the MIT license.

Who should use it

Teams working in the npm ecosystem who need generate or verify a Proof Key for Code Exchange (PKCE) challenge pair and value a focused solution.

When not to use it

Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.

Pros

  • Clear open-source license (MIT).

Cons

  • No bundled TypeScript types (may require a separate @types package).

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

crouchcd

Keywords

PKCEoauth2

Frequently asked questions

Should I use pkce-challenge?

Yes — pkce-challenge scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 220 days ago. 3 releases in the last 2 years.

How do I install pkce-challenge?

Run `npm install pkce-challenge` to add pkce-challenge to your npm project.

What license is pkce-challenge released under?

pkce-challenge is distributed under the MIT license.

How popular is pkce-challenge?

npm does not publish download counts. Within PackageGraph's crawl, 2 known packages depend on pkce-challenge.

Is pkce-challenge still maintained?

The most recent release of pkce-challenge (v6.0.0) was published 7 months ago.

Does pkce-challenge run install scripts?

No. pkce-challenge does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.