![Create React App Officially Deprecated Amid React 19 Compatibility Issues](https://cdn.sanity.io/images/cgdhsj6q/production/04fa08cf844d798abc0e1a6391c129363cc7e2ab-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Create React App Officially Deprecated Amid React 19 Compatibility Issues
Create React App is officially deprecated due to React 19 issues and lack of maintenance—developers should switch to Vite or other modern alternatives.
@buckless/signed-data
Advanced tools
Sign data using HMAC-SHA1
Outputs both data and the signature in buffers
Signature is HMAC-SHA1 and is at least 4 bytes.
+-----------------------------------------------------------+
| | |
| | HMAC-SHA1 signature |
| Data | |
| | (4 to 20 bytes) |
| | |
+-----------------------------------------------------------+
const SignedData = require('@buckless/signed-data')
const inst = new SignedData(
'secret', // signature key
null, // max bytes (defaults to: auto)
null, // hashing algorithm (defaults to : nodejs crypto sha1)
[
// some number (from 0 to 16777215)
{
name: 'number',
default: '000000',
size: 3,
encode: number => number.toString(16),
decode: data => parseInt(data, 16)
}
]
)
const cipher = inst.encode(value)
const decipher = inst.decode(value)
// decipher === value
Export to string :
const SignedData = require('@buckless/signed-data')
const inst = new SignedData(
'secret', // signature key
null, // max bytes (defaults to: auto)
null, // hashing algorithm (defaults to : nodejs sha1)
[
// some number (from 0 to 16777215)
{
name: 'number',
default: '000000',
size: 3,
encode: number => number.toString(16),
decode: data => parseInt(data, 16)
}
]
)
const cipher = inst.encode(value).toString('hex')
const decipher = inst.decode(cipher) // decode can handle strings as well
// decipher === value
With more signature bytes:
const SignedData = require('@buckless/signed-data')
const inst = new SignedData(
'secret', // signature key
23, // (3 bytes of data + 20 bytes of signature)
null, // hashing algorithm (defaults to : nodejs sha1)
[
// some number (from 0 to 16777215)
{
name: 'number',
default: '000000',
size: 3,
encode: number => number.toString(16),
decode: data => parseInt(data, 16)
}
]
)
const cipher = inst.encode(value)
const decipher = inst.decode(value)
// cipher.length === 23
// decipher === value
With another SHA-1 algorithm (defaults to node's crypto module):
const SignedData = require('@buckless/signed-data')
const Rusha = require('rusha')
const inst = new SignedData(
'secret', // signature key
null, // max bytes (defaults to: auto)
Rusha.createHash, // Rusha.createHash is a great sha1 library
[
// some number (from 0 to 16777215)
{
name: 'number',
default: '000000',
size: 3,
encode: number => number.toString(16),
decode: data => parseInt(data, 16)
}
]
)
const cipher = inst.encode(value)
const decipher = inst.decode(cipher)
// decipher === value
constructor(secret: String, [maxBytes: Number], [hashAlgorithm: Function], [scheme: Array])
# Override secret from constructor
key(secret: String) : SignedData
encode(data: Object)
decode(raw: Buffer|String)
FAQs
Sign unsigned numbers using HMAC-SHA1
The npm package @buckless/signed-data receives a total of 6 weekly downloads. As such, @buckless/signed-data popularity was classified as not popular.
We found that @buckless/signed-data demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Create React App is officially deprecated due to React 19 issues and lack of maintenance—developers should switch to Vite or other modern alternatives.
Security News
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
Security News
The Linux Foundation is warning open source developers that compliance with global sanctions is mandatory, highlighting legal risks and restrictions on contributions.