NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #2510 most downloaded on npm
This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()
Last release 7 days ago
29 Sep 2026
Ships unpredictably
gaps range from 5 weeks to 4.2 years
Most releases are documented
notes for 22 of 27 stable releases
Nothing withdrawn
no release was ever pulled
13 years old
27 releases · first in 2014
[Fix] hash long passwords once, not on every iteration `493d8d8`
[New] add TypeScript type declarations `fb1f747`
fb1f747-0 keylen to +0 7c4a495@ljharb/eslint-config, @types/node, eslint, npmignore e3cce16f6b0e42npm run postlint b729629@ljharb/eslint-config, @types/node, auto-changelog 5e0cf51to-buffer 1c3b1f5528bd38One column per quarter.
[Fix] only allow finite iterations `67bd94d`
[Deps] update create-hash, ripemd160, sha.js, to-buffer `8dbf49b`
[Fix] pin create-hash, ripemd160 due to breaking changes `e079968`
8b067309a76e2f6fd84bfauto-changelog 796c38d3661fb07431b57eb9f97a26d4fd3513906aab04da889694cfd0d534bto-buffer e3102a8fca0c9da2c7d93files to npmignore 7f31fbc8d628e8fc61005create-hmac, safe-buffer, sha.js ae2a7d0create-hash, ripemd160 due to breaking changes e07996845fbcf319ea57b645e252Check for process before accessing `449e510`
### Commits - style nit `6d994f2` - remove arrow `70ea270`
check if process.version is available `#85`
#851674cbdb8888200b77ea96af65e7bca4182b1c669bf61abc7ab625043fbb793a572cbc4a4deed47c59adDo not inline rmd160Func `b498c9b`
use the local implementations if crypto.bpkdf2Sync `#72`
fail better when node version loaded in browser `#71`
c3d29985c5052874b80d3c818cf19e0d1680985c3e90ac7480fa96388281fc6fix #60 - use browser.js in the browser, instead of index.js; include lib folder in the published package `#62`
### Commits - update files `3313867`
3313867node for the node, js for the browser `#59`
#59#57#56#54cdaf5c0fa2e0a1216a6a7969904589e0e80fb5687396518aadd3467c15b2cbffec6652dc2e15aae3f2a552c3960ef38b2b03832fb2f720b484237385b33204protect 0.10 users by throwing `#47`
package: 1 too many indentations `bffd057`
browser: avoid process.version split before process.browser `#44`
#44tests: fix UTF-8 encoding `#42`
use tape instead of mocha `#35`
#35#36#33#32#28#29#24#14#34#34#31#31#20#13#135eaa6ba94e7979931b7d5dd0231593ffd5159f65777ab61b48bf4958e6b815f7730a553ee45ed2268e11c470de19f949d4Fix shim encoding and more reliably close child process `#12`
### Commits - repo name `a6516d9` - change name `471fb83`
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →