bcrypt 3.0.0

A bcrypt library for NodeJS.

bcrypt@3.0.0 was published on 2018-07-06. Its manifest declares 2 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >= 6.0.0.

Deprecated: versions < v5.0.0 do not handle NUL in passwords properly

All bcrypt versions · Permanent reference to 3.0.0 · Latest release

Package specifications

Version	3.0.0
License declaration	MIT
Published	2018-07-06T09:55:34.022Z
Node.js requirement	>= 6.0.0
Type declarations	Not declared
Runtime dependency count	2
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	1967.90 KiB
Published file count	561
Package type	Not declared
ES module entry	Not declared
Default entry	./bcrypt
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	70
Repository stars	7805
Repository forks	552

Install bcrypt 3.0.0

npm install bcrypt@3.0.0
pnpm add bcrypt@3.0.0
yarn add bcrypt@3.0.0

Runtime dependencies

nan 2.10.0
node-pre-gyp 0.10.2

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

bcrypt>3.0.0>abbrev@1.1.1 — indirect
bcrypt>3.0.0>ansi-regex@2.1.1 — indirect
bcrypt>3.0.0>aproba@1.2.0 — indirect
bcrypt>3.0.0>are-we-there-yet@1.1.5 — indirect
bcrypt>3.0.0>balanced-match@1.0.0 — indirect
bcrypt>3.0.0>brace-expansion@1.1.11 — indirect
bcrypt>3.0.0>chownr@1.0.1 — indirect
bcrypt>3.0.0>code-point-at@1.1.0 — indirect
bcrypt>3.0.0>concat-map@0.0.1 — indirect
bcrypt>3.0.0>console-control-strings@1.1.0 — indirect
bcrypt>3.0.0>core-util-is@1.0.2 — indirect
bcrypt>3.0.0>debug@2.6.9 — indirect
bcrypt>3.0.0>deep-extend@0.6.0 — indirect
bcrypt>3.0.0>delegates@1.0.0 — indirect
bcrypt>3.0.0>detect-libc@1.0.3 — indirect
bcrypt>3.0.0>fs-minipass@1.2.5 — indirect
bcrypt>3.0.0>fs.realpath@1.0.0 — indirect
bcrypt>3.0.0>gauge@2.7.4 — indirect
bcrypt>3.0.0>glob@7.1.2 — indirect
bcrypt>3.0.0>has-unicode@2.0.1 — indirect
bcrypt>3.0.0>iconv-lite@0.4.23 — indirect
bcrypt>3.0.0>ignore-walk@3.0.1 — indirect
bcrypt>3.0.0>inflight@1.0.6 — indirect
bcrypt>3.0.0>inherits@2.0.3 — indirect
bcrypt>3.0.0>ini@1.3.5 — indirect
bcrypt>3.0.0>is-fullwidth-code-point@1.0.0 — indirect
bcrypt>3.0.0>isarray@1.0.0 — indirect
bcrypt>3.0.0>minimatch@3.0.4 — indirect
bcrypt>3.0.0>minimist@0.0.8 — indirect
bcrypt>3.0.0>minipass@2.3.3 — indirect
bcrypt>3.0.0>minipass>safe-buffer@5.1.2 — indirect
bcrypt>3.0.0>minipass>yallist@3.0.2 — indirect
bcrypt>3.0.0>minizlib@1.1.0 — indirect
bcrypt>3.0.0>mkdirp@0.5.1 — indirect
bcrypt>3.0.0>ms@2.0.0 — indirect
bcrypt>3.0.0>needle@2.2.1 — indirect
bcrypt>3.0.0>node-pre-gyp@0.10.2 — direct
bcrypt>3.0.0>nopt@4.0.1 — indirect
bcrypt>3.0.0>npm-bundled@1.0.3 — indirect
bcrypt>3.0.0>npm-packlist@1.1.10 — indirect
bcrypt>3.0.0>npmlog@4.1.2 — indirect
bcrypt>3.0.0>number-is-nan@1.0.1 — indirect
bcrypt>3.0.0>object-assign@4.1.1 — indirect
bcrypt>3.0.0>once@1.4.0 — indirect
bcrypt>3.0.0>os-homedir@1.0.2 — indirect
bcrypt>3.0.0>os-tmpdir@1.0.2 — indirect
bcrypt>3.0.0>osenv@0.1.5 — indirect
bcrypt>3.0.0>path-is-absolute@1.0.1 — indirect
bcrypt>3.0.0>process-nextick-args@2.0.0 — indirect
bcrypt>3.0.0>rc@1.2.8 — indirect
bcrypt>3.0.0>rc>minimist@1.2.0 — indirect
bcrypt>3.0.0>readable-stream@2.3.5 — indirect
bcrypt>3.0.0>rimraf@2.6.2 — indirect
bcrypt>3.0.0>safe-buffer@5.1.1 — indirect
bcrypt>3.0.0>safer-buffer@2.1.2 — indirect
bcrypt>3.0.0>sax@1.2.4 — indirect
bcrypt>3.0.0>semver@5.5.0 — indirect
bcrypt>3.0.0>set-blocking@2.0.0 — indirect
bcrypt>3.0.0>signal-exit@3.0.2 — indirect
bcrypt>3.0.0>string-width@1.0.2 — indirect
bcrypt>3.0.0>string_decoder@1.0.3 — indirect
bcrypt>3.0.0>strip-ansi@3.0.1 — indirect
bcrypt>3.0.0>strip-json-comments@2.0.1 — indirect
bcrypt>3.0.0>tar@4.4.4 — indirect
bcrypt>3.0.0>tar>safe-buffer@5.1.2 — indirect
bcrypt>3.0.0>tar>yallist@3.0.2 — indirect
bcrypt>3.0.0>util-deprecate@1.0.2 — indirect
bcrypt>3.0.0>wide-align@1.1.3 — indirect
bcrypt>3.0.0>wrappy@1.0.2 — indirect
nan@2.10.0 — direct

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-5wg4-74h6-q47v

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	8/10 — Found 10/12 approved changesets -- score normalized to 8
Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Security-Policy	4/10 — security policy file detected
Binary-Artifacts	10/10 — no binaries found in the repo
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Pinned-Dependencies	2/10 — dependency not pinned by hash detected -- score normalized to 2
Signed-Releases	0/10 — Project has not signed or included provenance with any releases.
Branch-Protection	0/10 — branch protection not enabled on development/release branches
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/bcrypt/3.0.0 — retrieved 2026-10-29T13:29:22.093Z
https://api.deps.dev/v3/systems/npm/packages/bcrypt/versions/3.0.0 — retrieved 2026-10-29T13:29:22.641Z
https://api.deps.dev/v3/systems/npm/packages/bcrypt/versions/3.0.0:dependencies — retrieved 2026-10-29T13:29:22.653Z
https://api.deps.dev/v3/projects/github.com%2Fkelektiv%2Fnode.bcrypt.js — retrieved 2026-10-29T08:25:23.895Z