
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
ourpassgen-cli
Advanced tools
A CLI tool to generate secure random passwords and copy them to clipboard
A secure, customizable password generator CLI tool that generates random passwords and automatically copies them to your clipboard.
npm install -g ourpassgen-cli
npx ourpassgen-cli
Generate a default 16-character password and copy to clipboard:
ourpassgen
# or
npx ourpassgen-cli
ourpassgen [options] [command]
-l, --length <number> - Password length (default: 16)--no-lowercase - Exclude lowercase letters--no-uppercase - Exclude uppercase letters--no-numbers - Exclude numbers--no-symbols - Exclude symbols (!@#$%^&*()_+-=[]{}|;:,.<>?)-x, --exclude-ambiguous - Exclude ambiguous characters (il1Lo0O)--no-copy - Don't copy to clipboard, just display-h, --help - Display help information-V, --version - Display version number# Generate a 12-character password (includes symbols by default)
ourpassgen -l 12
# Generate a password without symbols
ourpassgen --no-symbols
# Generate a password without ambiguous characters
ourpassgen -x
# Generate a password and display it (don't copy to clipboard)
ourpassgen --no-copy
# Generate a password with only lowercase and numbers
ourpassgen --no-uppercase --no-symbols
Generate a simple password with letters, numbers, and symbols (no ambiguous characters):
ourpassgen simple
ourpassgen simple -l 10 # Custom length
ourpassgen simple --no-clipboard # Don't copy to clipboard
Generate a strong password with all character types (default: 20 characters):
ourpassgen strong
ourpassgen strong -l 24 # Custom length (default: 20)
ourpassgen strong --no-clipboard # Don't copy to clipboard
Generate a numeric PIN (default: 6 digits):
ourpassgen pin
ourpassgen pin -l 4 # 4-digit PIN
ourpassgen pin -l 8 # 8-digit PIN
ourpassgen pin --no-clipboard # Don't copy to clipboard
You can also use this package as a library in your Node.js or React/Next.js applications.
npm install ourpassgen-cli
import { generatePassword } from 'ourpassgen-cli';
// Generate a default password (16 chars, letters/numbers/symbols)
const password = generatePassword({ length: 16 });
console.log(password);
import { generatePassword } from 'ourpassgen-cli';
const password = generatePassword({
length: 24,
includeLowercase: true,
includeUppercase: true,
includeNumbers: true,
includeSymbols: true,
excludeAmbiguous: true // Exclude 'i', 'l', '1', 'L', 'o', '0', 'O'
});
It uses crypto.randomBytes in Node.js and window.crypto.getRandomValues in browsers to ensuring cryptographically secure generation in both environments.
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+-=[]{}|;:,.<>?il1Lo0O (excluded when using -x flag)This tool uses Node.js's built-in crypto.getRandomValues() function to ensure cryptographically secure random number generation. This makes the generated passwords suitable for security-sensitive applications.
npm installnpm linkourpassgen --helpourpassgen-cli/
├── bin/
│ └── passgen.js # Main CLI script
├── package.json # Package configuration
└── README.md # Documentation
MIT License - see the LICENSE file for details.
Contributions are welcome! Please feel free to submit a Pull Request.
FAQs
A CLI tool to generate secure random passwords and copy them to clipboard
The npm package ourpassgen-cli receives a total of 0 weekly downloads. As such, ourpassgen-cli popularity was classified as not popular.
We found that ourpassgen-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.