Socket
Book a DemoInstallSign in
Socket

@dfinity/cbor

Package Overview
Dependencies
Maintainers
12
Versions
4
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@dfinity/cbor

A small implementation of Concise Binary Object Representation (CBOR) in pure JavaScript.

0.2.2
latest
Source
npmnpm
Version published
Weekly downloads
0
Maintainers
12
Weekly downloads
 
Created
Source

CBOR encoder/decoder

NPM Version Libraries.io dependency status for latest release

Test Lint

A small implementation of Concise Binary Object Representation (CBOR) in pure JavaScript.

Note: this package is not 100% compatible with the CBOR specification. See the Not implemented section for more details.

Installation

Using npm:

npm install @dfinity/cbor

Using pnpm:

pnpm add @dfinity/cbor

Using yarn:

yarn add @dfinity/cbor

Usage

Simple:

import { encode, decode } from '@dfinity/cbor';

const value = true;
const encoded = encode(value); // returns `Uint8Array [245]` (which is "F5" in hex)
const decoded = decode(encoded); // returns `true`

With replacer/reviver:

import { encode, decode, type Replacer, type Reviver } from '@dfinity/cbor';

const value = { a: 1, b: 2 };

// Encoding with replacer
const replacer: Replacer = val => (typeof val === 'number' ? val * 2 : val);
const result = encode(value, replacer);
decode(result); // { a: 2, b: 4 }

// Decoding with reviver
const bytes = encode(value);
const reviver: Reviver = val => (typeof val === 'number' ? val * 2 : val);
decode(bytes, reviver); // { a: 2, b: 4 }

API

:toolbox: Functions

:gear: decode

Decodes a CBOR byte array into a value. See {@link Reviver} for more information.

FunctionType
decode<T extends unknown = any>(input: Uint8Array<ArrayBufferLike>, reviver?: Reviver<T> or undefined) => T

Parameters:

  • input: - The CBOR byte array to decode.
  • reviver: - A function that can be used to manipulate the decoded value.

Examples:

Simple

const value = true;
const encoded = encode(value); // returns `Uint8Array [245]` (which is "F5" in hex)
const decoded = decode(encoded); // returns `true`

Reviver

const bytes = ...; // Uint8Array corresponding to the CBOR encoding of `{ a: 1, b: 2 }`
const reviver: Reviver = val => (typeof val === 'number' ? val * 2 : val);
decode(bytes, reviver); // returns `{ a: 2, b: 4 }`

:gear: encode

Encodes a value into a CBOR byte array.

FunctionType
encode<T = any>(value: CborValue<T>, replacer?: Replacer<T> or undefined) => Uint8Array<ArrayBufferLike>

Parameters:

  • value: - The value to encode.
  • replacer: - A function that can be used to manipulate the input before it is encoded.

Examples:

Simple

const value = true;
const encoded = encode(value); // returns `Uint8Array [245]` (which is "F5" in hex)

Replacer

const replacer: Replacer = val => (typeof val === 'number' ? val * 2 : val);
encode({ a: 1, b: 2 }, replacer); // returns the Uint8Array corresponding to the CBOR encoding of `{ a: 2, b: 4 }`

:gear: encodeWithSelfDescribedTag

Encodes a value into a CBOR byte array (same as {@link encode}), but prepends the self-described CBOR tag (55799).

FunctionType
encodeWithSelfDescribedTag<T = any>(value: CborValue<T>, replacer?: Replacer<T> or undefined) => Uint8Array<ArrayBufferLike>

Parameters:

  • value: - The value to encode.
  • replacer: - A function that can be used to manipulate the input before it is encoded.

Examples:

const value = true;
const encoded = encodeWithSelfDescribedTag(value); // returns the Uint8Array [217, 217, 247, 245] (which is "D9D9F7F5" in hex)

:wrench: Constants

:gear: CBOR_SELF_DESCRIBED_TAG

The tag number 55799, the self-described tag for CBOR. The serialization of this tag's head is 0xd9d9f7.

ConstantType
CBOR_SELF_DESCRIBED_TAG55799

:gear: CBOR_STOP_CODE

ConstantType
CBOR_STOP_CODEunique symbol

:gear: TOKEN_VALUE_MAX

ConstantType
TOKEN_VALUE_MAX23

:gear: ONE_BYTE_MAX

ConstantType
ONE_BYTE_MAX255

:gear: TWO_BYTES_MAX

ConstantType
TWO_BYTES_MAX65535

:gear: FOUR_BYTES_MAX

ConstantType
FOUR_BYTES_MAX4294967295

:gear: EIGHT_BYTES_MAX

The maximum value that can be encoded in 8 bytes: 18446744073709551615n.

ConstantType
EIGHT_BYTES_MAXbigint

:factory: DecodingError

:factory: EncodingError

:nut_and_bolt: Enum

:gear: CborSimpleType

PropertyTypeDescription
False0x14
True0x15
Null0x16
Undefined0x17
Break0x1f

:gear: CborMajorType

PropertyTypeDescription
UnsignedInteger0
NegativeInteger1
ByteString2
TextString3
Array4
Map5
Tag6
Simple7

:gear: CborMinorType

PropertyTypeDescription
Value23
OneByte24
TwoBytes25
FourBytes26
EightBytes27
Indefinite31

Not implemented

  • Custom tag encoding/decoding.
    • Custom tags allow for encoding and decoding of custom types.
    • We currently don't use this custom tags (although we probably should).
    • Since we don't directly encode developer provided data (that's encoded by Candid) then we can safely say we don't need the feature.
  • Unit tests for text/byte strings with a length that does not fit in four bytes or less.
    • The "length" of the text string can be encoded with up to 8 bytes, which means the largest possible string length is 18,446,744,073,709,551,615. The tests cover a string length that's encoded up to four 4 bytes, longer than this and the tests became extremely slow.
    • The largest number in 4 bytes is 2,147,483,647 which would represent the length of an ~2gb string, which is not possible to fit into a single IC message anyway.
  • Indeterminite length encoding for text and byte strings
    • To encode a string length longer than the previously mentioned 8 byte limit, a string can be encoded with an "indeterminate" length.
    • Similar to the previous point, this would be impractical for the IC due to message limits.

Contributing

Check out the contribution guidelines.

Setup

Running tests

pnpm test

Formatting

pnpm format

Generating documentation

We use tsdoc-markdown to generate the documentation.

To update the documentation in the README.md file, run:

pnpm tsdoc

License

This project is licensed under the Apache License 2.0.

Keywords

cbor

FAQs

Package last updated on 17 Jun 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

About

Packages

Stay in touch

Get open source security insights delivered straight into your inbox.

  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc

U.S. Patent No. 12,346,443 & 12,314,394. Other pending.