</>PackageGraphPackageGraph

tweetnacl

npmv1.0.3TypeScript

Port of TweetNaCl cryptographic library to JavaScript

Not recommended for new projects

No — tweetnacl should not be adopted for new projects. Last published 2403 days ago.

  • AAdoption: grade A, Excellent.

    36M downloads per week and 2 known dependents.

  • FMaintenance: grade F, Failing.

    Last published 2403 days ago.

  • AWeight: grade A, Excellent.

    Zero runtime dependencies, about 171 KB installed.

  • BSupply chain: grade B, Good.

    This package has a single maintainer (bus factor of 1).

  • ALicense: grade A, Excellent.

    Unlicense — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding tweetnacl to a project.

0
Direct dependencies

Runtime packages this one declares itself.

0
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

171 KB
Install size

Unpacked size of this package plus its entire runtime tree.

—
Tree depth

Longest resolved dependency chain below this package.

Compatibility

Node.js
No constraint declared
Module format
CommonJS only
TypeScript
Types included
Install scripts
None

tweetnacl vs the alternatives

Packages solving a similar problem in the npm ecosystem, compared on the signals that drive an adoption decision.

PackageWeekly downloadsDependentsLicenseLast release
tweetnaclthis page36M2Unlicense6 years ago
@noble/hashes01MIT14 days ago
node-forge05(BSD-3-Clause OR GPL-2.0)14 days ago
jose02MIT15 days ago
fast-json-stable-stringify158.4M2MIT14 days ago
json-stable-stringify-without-jsonify138.4M1MIT14 days ago

Dependencies

Declared by tweetnacl v1.0.3. Runtime dependencies are installed with the package; dev dependencies are not.

Dev (7)

browserify ^16.2.3eslint ^6.8.0faucet ^0.0.1tap-browser-color ^0.1.2tape ^4.13.0tweetnacl-util ^0.15.0uglify-js ^3.7.5

Used by

Popular packages that depend on tweetnacl.

sshpknpm

A library for finding and using SSH public keys

↓ 0/wk◈ 1 dependents⚖ MIT
bcrypt-pbkdfnpm

Port of the OpenBSD bcrypt_pbkdf function to pure JS

↓ 0/wk◈ 1 dependents⚖ BSD-3-Clause

Relationship graph

Dependencies (left) and dependents (right) of tweetnacl.

sshpkbcrypt-pbkdftweetnacl
tweetnacl dependencies dependents

Frequently installed together

safer-buffernpm

Modern Buffer API polyfill without footguns

↓ 157.7M/wk◈ 5 dependents⚖ MIT
asn1npm

Contains parsers and serializers for ASN.1 (currently BER only)

↓ 31.6M/wk◈ 1 dependents⚖ MIT
jsbnnpm

The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.

↓ 30M/wk◈ 2 dependents⚖ MIT
dashdashnpm

A light, featureful and explicit option parsing library.

↓ 20.5M/wk◈ 1 dependents⚖ MIT
ecc-jsbnnpm

ECC JS code based on JSBN

↓ 20.4M/wk◈ 1 dependents⚖ MIT
getpassnpm

getpass for node.js

↓ 20.3M/wk◈ 1 dependents⚖ MIT
bcrypt-pbkdfnpm

Port of the OpenBSD bcrypt_pbkdf function to pure JS

↓ 0/wk◈ 1 dependents⚖ BSD-3-Clause
assert-plusnpm

Extra assertions on top of node's assert module

↓ 0/wk◈ 6 dependents⚖ MIT

Release history

No releases in the last two years, typically about 45 days apart.

Recent versions of tweetnacl
VersionPublishedSizeLicense
1.0.3latest6 years ago171 KBUnlicense
1.0.26 years ago170 KBUnlicense
1.0.17 years ago170 KBUnlicense
1.0.09 years ago—Unlicense
1.0.0-rc.19 years ago—Unlicense
0.14.59 years ago—Unlicense
0.14.49 years ago—SEE LICENSE IN COPYING.txt
0.14.310 years ago—SEE LICENSE IN COPYING.txt
0.14.210 years ago—SEE LICENSE IN COPYING.txt
0.14.110 years ago—SEE LICENSE IN COPYING.txt
0.14.010 years ago—Public domain
0.13.310 years ago—Public domain
0.13.211 years ago—CC0-1.0
0.13.111 years ago—Public domain
0.13.011 years ago—Public domain

Overview

tweetnacl is an npm package that port of TweetNaCl cryptographic library to JavaScript. It is extremely widely used, with about 36M downloads per week and 2 known dependents in the graph. The latest version is 1.0.3, released under the Unlicense license.

Who should use it

Teams working in the npm ecosystem who need port of TweetNaCl cryptographic library to JavaScript and value a battle-tested, widely-adopted solution.

When not to use it

Consider an alternative if you need to or if a more actively-maintained option better fits your npm stack.

Pros

  • Large, well-established user base (36M weekly downloads).
  • Ships TypeScript type definitions.
  • Clear open-source license (Unlicense).

Cons

  • No significant drawbacks detected from available metadata.

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

dchest

Keywords

cryptocryptographycurve25519ed25519encrypthashkeynaclpoly1305publicsalsa20signatures

Frequently asked questions

Should I use tweetnacl?

No — tweetnacl should not be adopted for new projects. Last published 2403 days ago.

How do I install tweetnacl?

Run `npm install tweetnacl` to add tweetnacl to your npm project.

What license is tweetnacl released under?

tweetnacl is distributed under the Unlicense license.

How popular is tweetnacl?

tweetnacl has approximately 36,032,209 downloads per week and 2 known dependent packages.

Is tweetnacl still maintained?

The most recent release of tweetnacl (v1.0.3) was published 6 years ago.

Does tweetnacl run install scripts?

No. tweetnacl does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.