NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #611 most downloaded on npm
JWA implementation (supports all JWS algorithms)
Last release 1 years ago
07 May 2025
Ships unpredictably
gaps range from 9 days to 5.4 years
Some releases are documented
notes for 10 of 21 stable releases
Nothing withdrawn
no release was ever pulled
14 years old
21 releases · first in 2013
Replace buffer-equal-constant-time with crypto.timingSafeEqual by @Tango992 in #52
Full Changelog: v2.0.0...v2.0.1
* [MAJOR] Algorithm name matching is now case-sensitive. See 5ff495b for details.
v2.0.0
* [MAJOR] Algorithm name matching is now case-sensitive. See
5ff495b for details.
One column per quarter.
Replace buffer-equal-constant-time with crypto.timingSafeEqual by @Tango992 in #52
Full Changelog: v1.4.1...v1.4.2
* Fix PS* signatures to match spec. Thanks @panva !
v1.4.1
* Fix PS* signatures to match spec. Thanks @panva!
* [MINOR] HS* and PS* support KeyObjects if available
v1.4.0
* [MINOR] HS* and PS* support KeyObjects if available
* [MINOR] RS* and ES* support KeyObjects if available See https://nodejs.org/api/crypto.html#crypto_class_keyobject * Update ecdsa-sig-formatter to 1.
v1.3.0
* [MINOR] RS* and ES* support KeyObjects if available
See https://nodejs.org/api/crypto.html#crypto_class_keyobject
* Update ecdsa-sig-formatter to 1.0.11
* non-functional, added TypeScript typings
* [MINOR] Support for PS256, PS384, PS512. Thanks @csprl ! * Super crisp build badge in README. Thanks @MarkHerhold !
v1.2.0
* [MINOR] Support for PS256, PS384, PS512. Thanks @csprl!
* Super crisp build badge in README. Thanks @MarkHerhold!
* The base64url package has issues with TypeScript and also has an open vulnerability reported on HackerOne (not affected).
v1.1.6: inline base64url
* The base64url package has issues with TypeScript and also
has an open vulnerability reported on HackerOne (not
affected).
Most replacement packages are only compatible with Node 4+
so inlining an implementation in order to release with a
patch version
* Update ecdsa-sig-formatter to v1.0.10
package: version v1.1.5
package: version v1.1.5
package: version v1.1.4
package: version v1.1.4
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →