
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
keepass.io
Advanced tools
keepass.io is a Node.js library for reading and writing KeePass databases. Please note that currently only the newest database version, called KDBX, is supported. Features include so far:
Password and/or Keyfile credentials: keepass.io supports both of the most common used credential types for KeePass databases.
Powerful API: This library offers you a powerful API, which even allows you raw access to the database, so even unsupported third-party fields can be modified.
Joyfully simple and flexible: I've built keepass.io to be easily understandable and a joy to use. It's built with JavaScript and tries to provide a solid foundation for modifying KDBX databases.
Stunning performance: To further improve performance, keepass.io even includes an optional native library, which will help while performing the key transformations. If your system should not have the Crypto++ Dev Libraries installed, it will automatically fallback to the slower Node.js methods.
Note: keepass.io is currently under active development. As such, while this library is well-tested, the API might change at anytime. Consider using it in production applications only if you're comfortable following a changelog and updating your usage accordingly.
As mentioned above, keepass.io is really easy to use. The following example code opens a database, outputs its name, changes the name to 'KeePass.IO rocks!' and saves the database with new credentials. More examples are available within the examples folder.
var path = require('path');
var kpio = require('../lib');
var db = new kpio.Database();
db.addCredential(new kpio.Credentials.Password('thematrix'));
db.addCredential(new kpio.Credentials.Keyfile('apoc.key'));
db.loadFile(databasePath, function(err) {
if(err) throw err;
var rawDatabase = db.getRawApi().get();
console.log('Database name: ' + rawDatabase.KeePassFile.Meta.DatabaseName);
rawDatabase.KeePassFile.Meta.DatabaseName = 'KeePass.IO rocks!';
db.resetCredentials();
db.addCredential(new kpio.Credentials.Password('morpheus'));
db.addCredential(new kpio.Credentials.Keyfile('trinity.key'));
db.getRawApi().set(rawDatabase);
db.saveFile(newDatabasePath, function(err) {
if(err) throw err;
});
});
Copyright © 2013-2014 Pascal Mathis. All rights reserved.
FAQs
Node.js library for reading and writing KeePass databases
We found that keepass.io demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.