
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Hashbow creates hexadecimal colors of everything. You can think of it like a crypto library, but instead of outputting md5s or sha1s it turns everything into color hashes.
hashbow('Bruce Willis')
outputs #40BFA8, a lovely mid turquiose blue.
whereas
hashbow('Nicolas Cage')
outputs a #BFA840, a Dijon Mustard kind of color.
Hashbow's color conversion is consistent, so every time you call hashbow('Bruce Willis') you will get the same lovely mid turquoise blue. This is very useful for assigning your users a color, brightening up a comment area, etc.
Hashbow uses the HSL colorspace to make it easy to get colors that work well together. The first parameter is used to calculate the hue of the result. You can also pass in custom saturation and lightness if you need to tweak (default is 50).
hashbow('Bruce Willis', 30);
Outputs #669990, a calmer seafoam green.
Setting the saturation to 0 will make everything greyscale.
hashbow('Bruce Willis', 0);
Outputs #7E8180
Hashbow will create color hashes of anything and everything, Strings, Objects, Functions, Numbers, whatever, etc.
npm install hashbow
hashbow(thingyToHash, saturation, lightness)
const hashbow = require('hashbow');
const actors = ['Bruce Willis', 'Nicolas Cage', 'Leonardo Di Caprio'];
actors.forEach(actor => {
const el = document.createElement('div');
el.innerHTML = actor;
el.style.color = hashbow(actor);
document.body.appendChild(el);
});
There is a CLI, just install globally
npm install hashbow --global
and then
hashbow boogers
Outputs #BF5340
You can use -s and -l to modify saturation and lightness too.
hashbow boogers -s 50 -l 22
Outputs #54241C
now you can color up your git logs, or like, something else that's cool
🙂️
FAQs
Hexadecimal hashes of everything
We found that hashbow demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.