@streamr/utils 103.8.0-rc.4

A collection of shared common utilities

@streamr/utils@103.8.0-rc.4 was published on 2026-08-17. Its manifest declares 17 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.

All @streamr/utils versions · Permanent reference to 103.8.0-rc.4 · View npm registry JSON · Latest release

Package specifications

Version	103.8.0-rc.4
License declaration	Apache-2.0
Published	2026-08-17T19:29:33.685Z
Node.js requirement	Not declared
Type declarations	Bundled declarations
Runtime dependency count	17
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	1883.53 KiB
Published file count	13
Package type	Not declared
ES module entry	./dist/exports-nodejs.js
Default entry	./dist/exports-nodejs.cjs
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	116
Repository stars	577
Repository forks	43

Install @streamr/utils 103.8.0-rc.4

npm install @streamr/utils@103.8.0-rc.4
pnpm add @streamr/utils@103.8.0-rc.4
yarn add @streamr/utils@103.8.0-rc.4

Runtime dependencies

pino ^10.1.0
sha3 ^2.1.4
buffer ^6.0.3
lodash ^4.17.21
asn1.js ^5.4.1
hash-base ^3.1.2
secp256k1 ^5.0.1
buffer-shim ^1.0.1
pino-pretty ^13.1.2
@noble/curves ^1.9.7
@noble/hashes ^2.0.1
eventemitter3 ^5.0.0
browserify-aes ^1.2.0
public-encrypt ^4.0.3
path-browserify ^1.0.1
readable-stream ^4.7.0
@noble/post-quantum ^0.4.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@noble/curves@1.9.7 — direct
@noble/hashes@2.4.0 — direct
@noble/post-quantum@0.4.1 — direct
asn1.js@5.4.1 — direct
browserify-aes@1.2.0 — direct
buffer@6.0.3 — direct
buffer-shim@1.0.1 — direct
eventemitter3@5.0.4 — direct
hash-base@3.1.2 — direct
lodash@4.18.1 — direct
path-browserify@1.0.1 — direct
pino@10.4.0 — direct
pino-pretty@13.2.0 — direct
public-encrypt@4.0.3 — direct
readable-stream@4.8.0 — direct
secp256k1@5.0.2 — direct
sha3@2.1.4 — direct
@noble/hashes@1.8.0 — indirect
@noble/hashes@1.8.0 — indirect
bn.js@4.12.5 — indirect
inherits@2.0.4 — indirect
minimalistic-assert@1.0.1 — indirect
safer-buffer@2.1.2 — indirect
buffer-xor@1.0.3 — indirect
cipher-base@1.0.7 — indirect
create-hash@1.2.0 — indirect
evp_bytestokey@1.0.3 — indirect
safe-buffer@5.2.1 — indirect
base64-js@1.5.1 — indirect
ieee754@1.2.1 — indirect
readable-stream@2.3.8 — indirect
to-buffer@1.2.2 — indirect
@pinojs/redact@0.4.0 — indirect
atomic-sleep@1.0.0 — indirect
on-exit-leak-free@2.1.2 — indirect
pino-abstract-transport@3.0.0 — indirect
pino-std-serializers@7.1.0 — indirect
process-warning@5.1.1 — indirect
quick-format-unescaped@4.0.4 — indirect
real-require@1.0.0 — indirect
safe-stable-stringify@2.5.0 — indirect
sonic-boom@4.2.1 — indirect
thread-stream@4.2.0 — indirect
colorette@2.0.20 — indirect
dateformat@4.6.3 — indirect
fast-copy@4.3.1 — indirect
fast-safe-stringify@2.1.1 — indirect
help-me@5.0.0 — indirect
joycon@3.1.1 — indirect
minimist@1.2.8 — indirect
pump@3.0.4 — indirect
secure-json-parse@4.1.1 — indirect
sonic-boom@5.0.2 — indirect
strip-json-comments@5.0.3 — indirect
browserify-rsa@4.1.1 — indirect
parse-asn1@5.1.10 — indirect
randombytes@2.1.0 — indirect
abort-controller@3.0.0 — indirect
events@3.3.0 — indirect
process@0.11.10 — indirect
string_decoder@1.3.0 — indirect
elliptic@6.6.1 — indirect
node-addon-api@5.1.0 — indirect
node-gyp-build@4.8.4 — indirect
md5.js@1.3.5 — indirect
ripemd160@2.0.3 — indirect
sha.js@2.4.12 — indirect
core-util-is@1.0.3 — indirect
isarray@1.0.0 — indirect
process-nextick-args@2.0.1 — indirect
safe-buffer@5.1.2 — indirect
string_decoder@1.1.1 — indirect
util-deprecate@1.0.2 — indirect
isarray@2.0.5 — indirect
typed-array-buffer@1.0.3 — indirect
split2@4.2.0 — indirect
end-of-stream@1.4.5 — indirect
once@1.4.0 — indirect
bn.js@5.2.5 — indirect
asn1.js@4.10.1 — indirect
pbkdf2@3.1.7 — indirect
event-target-shim@5.0.1 — indirect
brorand@1.1.0 — indirect
hash.js@1.1.7 — indirect
hmac-drbg@1.0.1 — indirect
minimalistic-crypto-utils@1.0.1 — indirect
safe-buffer@5.1.2 — indirect
call-bound@1.0.4 — indirect
es-errors@1.3.0 — indirect
is-typed-array@1.1.15 — indirect
wrappy@1.0.2 — indirect
create-hmac@1.1.7 — indirect
call-bind-apply-helpers@1.0.2 — indirect
get-intrinsic@1.3.1 — indirect
which-typed-array@1.1.24 — indirect
function-bind@1.1.2 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
es-define-property@1.0.1 — indirect
es-object-atoms@1.1.2 — indirect
generator-function@2.0.1 — indirect
get-proto@1.0.1 — indirect
gopd@1.2.0 — indirect
has-symbols@1.1.0 — indirect
hasown@2.0.4 — indirect
math-intrinsics@1.1.0 — indirect
available-typed-arrays@1.0.7 — indirect
call-bind@1.0.9 — indirect
for-each@0.3.5 — indirect
has-tostringtag@1.0.2 — indirect
dunder-proto@1.0.1 — indirect
possible-typed-array-names@1.1.0 — indirect
set-function-length@1.2.2 — indirect
is-callable@1.2.7 — indirect
define-data-property@1.1.4 — indirect
has-property-descriptors@1.0.2 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	5/10 — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Code-Review	1/10 — Found 5/30 approved changesets -- score normalized to 1
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Security-Policy	0/10 — security policy file not detected
License	0/10 — license file not detected
Binary-Artifacts	10/10 — no binaries found in the repo
Branch-Protection	0/10 — branch protection not enabled on development/release branches
Pinned-Dependencies	1/10 — dependency not pinned by hash detected -- score normalized to 1
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

Readable npm registry JSON — retrieved 2026-11-01T16:29:13.010Z
https://api.deps.dev/v3/systems/npm/packages/%40streamr%2Futils/versions/103.8.0-rc.4 — retrieved 2026-11-01T16:29:13.420Z
https://api.deps.dev/v3/systems/npm/packages/%40streamr%2Futils/versions/103.8.0-rc.4:dependencies — retrieved 2026-11-01T16:29:13.446Z
https://api.deps.dev/v3/projects/github.com%2Fstreamr-dev%2Fnetwork — retrieved 2026-11-01T16:29:13.819Z