librariesSecurity
Security libraries
54 guides in this shelf, each one written to answer whether you should use the thing, not to sell it.
What our runs found on this shelf
We installed 54 of these 54 packages in a clean container and recorded what happened. The median install took 0.6s and left 2 MB on disk across 3 packages. oauthlib was the quickest at 0.2s. The lightest was jose at 1 MB; the heaviest, next-auth, pulled 347 MB. 2 of them reported at least one known vulnerability at install time.
Numbers come from our own runs, not from the packages\u2019 own claims. How we test \u2192
- cryptography · PyPI
- jose · npm
- pyjwt · PyPI
- dompurify · npm
- jsonwebtoken · npm
- requests-oauthlib · PyPI
- oauthlib · PyPI
- pyOpenSSL · PyPI
- PyNaCl · PyPI
- node-forge · npm
- keyring · PyPI
- tweetnacl · npm
- bcrypt · PyPI
- msal · PyPI
- basic-ftp · npm
- authlib · PyPI
- crypto-js · npm
- jwt-decode · npm
- @azure/identity · npm
- pycryptodome · PyPI
- jwks-rsa · npm
- helmet · npm
- oauth4webapi · npm
- openid-client · npm
- argon2-cffi · PyPI
- bcryptjs · npm
- tuf-js · npm
- pycryptodomex · PyPI
- sanitize-html · npm
- ecdsa · PyPI
- passport · npm
- python-jose · PyPI
- better-auth · npm
- pyotp · PyPI
- universal-github-app-jwt · npm
- passlib · PyPI
- next-auth · npm
- bcrypt · npm
- xss · npm
- isomorphic-dompurify · npm
- @openclaw/fs-safe · npm
- bandit · PyPI
- hvac · PyPI
- js-sha256 · npm
- ethereum-cryptography · npm
- semgrep · PyPI
- js-sha3 · npm
- @auth/core · npm
- libsodium · npm
- xml-crypto · npm
- libsodium-wrappers · npm
- node-rsa · npm
- otplib · npm
- rate-limiter-flexible · npm