bcrypt 3.0.2

A bcrypt library for NodeJS.

bcrypt@3.0.2 was published on 2018-10-18. Its manifest declares 2 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >= 6.0.0.

Deprecated: versions < v5.0.0 do not handle NUL in passwords properly

All bcrypt versions · Permanent reference to 3.0.2 · Latest release

Package specifications

Version	3.0.2
License declaration	MIT
Published	2018-10-18T02:58:28.960Z
Node.js requirement	>= 6.0.0
Type declarations	Not declared
Runtime dependency count	2
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	1977.41 KiB
Published file count	564
Package type	Not declared
ES module entry	Not declared
Default entry	./bcrypt
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	70
Repository stars	7805
Repository forks	552

Install bcrypt 3.0.2

npm install bcrypt@3.0.2
pnpm add bcrypt@3.0.2
yarn add bcrypt@3.0.2

Runtime dependencies

nan 2.11.1
node-pre-gyp 0.11.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

bcrypt>3.0.2>abbrev@1.1.1 — indirect
bcrypt>3.0.2>ansi-regex@2.1.1 — indirect
bcrypt>3.0.2>aproba@1.2.0 — indirect
bcrypt>3.0.2>are-we-there-yet@1.1.5 — indirect
bcrypt>3.0.2>balanced-match@1.0.0 — indirect
bcrypt>3.0.2>brace-expansion@1.1.11 — indirect
bcrypt>3.0.2>chownr@1.1.1 — indirect
bcrypt>3.0.2>code-point-at@1.1.0 — indirect
bcrypt>3.0.2>concat-map@0.0.1 — indirect
bcrypt>3.0.2>console-control-strings@1.1.0 — indirect
bcrypt>3.0.2>core-util-is@1.0.2 — indirect
bcrypt>3.0.2>debug@2.6.9 — indirect
bcrypt>3.0.2>deep-extend@0.6.0 — indirect
bcrypt>3.0.2>delegates@1.0.0 — indirect
bcrypt>3.0.2>detect-libc@1.0.3 — indirect
bcrypt>3.0.2>fs-minipass@1.2.5 — indirect
bcrypt>3.0.2>fs.realpath@1.0.0 — indirect
bcrypt>3.0.2>gauge@2.7.4 — indirect
bcrypt>3.0.2>glob@7.1.2 — indirect
bcrypt>3.0.2>has-unicode@2.0.1 — indirect
bcrypt>3.0.2>iconv-lite@0.4.24 — indirect
bcrypt>3.0.2>ignore-walk@3.0.1 — indirect
bcrypt>3.0.2>inflight@1.0.6 — indirect
bcrypt>3.0.2>inherits@2.0.3 — indirect
bcrypt>3.0.2>ini@1.3.5 — indirect
bcrypt>3.0.2>is-fullwidth-code-point@1.0.0 — indirect
bcrypt>3.0.2>isarray@1.0.0 — indirect
bcrypt>3.0.2>minimatch@3.0.4 — indirect
bcrypt>3.0.2>minimist@0.0.8 — indirect
bcrypt>3.0.2>minipass@2.3.4 — indirect
bcrypt>3.0.2>minipass>safe-buffer@5.1.2 — indirect
bcrypt>3.0.2>minipass>yallist@3.0.2 — indirect
bcrypt>3.0.2>minizlib@1.1.0 — indirect
bcrypt>3.0.2>mkdirp@0.5.1 — indirect
bcrypt>3.0.2>ms@2.0.0 — indirect
bcrypt>3.0.2>needle@2.2.3 — indirect
bcrypt>3.0.2>node-pre-gyp@0.11.0 — direct
bcrypt>3.0.2>nopt@4.0.1 — indirect
bcrypt>3.0.2>npm-bundled@1.0.5 — indirect
bcrypt>3.0.2>npm-packlist@1.1.11 — indirect
bcrypt>3.0.2>npmlog@4.1.2 — indirect
bcrypt>3.0.2>number-is-nan@1.0.1 — indirect
bcrypt>3.0.2>object-assign@4.1.1 — indirect
bcrypt>3.0.2>once@1.4.0 — indirect
bcrypt>3.0.2>os-homedir@1.0.2 — indirect
bcrypt>3.0.2>os-tmpdir@1.0.2 — indirect
bcrypt>3.0.2>osenv@0.1.5 — indirect
bcrypt>3.0.2>path-is-absolute@1.0.1 — indirect
bcrypt>3.0.2>process-nextick-args@2.0.0 — indirect
bcrypt>3.0.2>rc@1.2.8 — indirect
bcrypt>3.0.2>rc>minimist@1.2.0 — indirect
bcrypt>3.0.2>readable-stream@2.3.5 — indirect
bcrypt>3.0.2>rimraf@2.6.2 — indirect
bcrypt>3.0.2>safe-buffer@5.1.1 — indirect
bcrypt>3.0.2>safer-buffer@2.1.2 — indirect
bcrypt>3.0.2>sax@1.2.4 — indirect
bcrypt>3.0.2>semver@5.5.1 — indirect
bcrypt>3.0.2>set-blocking@2.0.0 — indirect
bcrypt>3.0.2>signal-exit@3.0.2 — indirect
bcrypt>3.0.2>string-width@1.0.2 — indirect
bcrypt>3.0.2>string_decoder@1.0.3 — indirect
bcrypt>3.0.2>strip-ansi@3.0.1 — indirect
bcrypt>3.0.2>strip-json-comments@2.0.1 — indirect
bcrypt>3.0.2>tar@4.4.6 — indirect
bcrypt>3.0.2>tar>safe-buffer@5.1.2 — indirect
bcrypt>3.0.2>tar>yallist@3.0.2 — indirect
bcrypt>3.0.2>util-deprecate@1.0.2 — indirect
bcrypt>3.0.2>wide-align@1.1.3 — indirect
bcrypt>3.0.2>wrappy@1.0.2 — indirect
nan@2.11.1 — direct

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-5wg4-74h6-q47v

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	8/10 — Found 10/12 approved changesets -- score normalized to 8
Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Security-Policy	4/10 — security policy file detected
Binary-Artifacts	10/10 — no binaries found in the repo
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Pinned-Dependencies	2/10 — dependency not pinned by hash detected -- score normalized to 2
Signed-Releases	0/10 — Project has not signed or included provenance with any releases.
Branch-Protection	0/10 — branch protection not enabled on development/release branches
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/bcrypt/3.0.2 — retrieved 2026-10-29T11:31:39.182Z
https://api.deps.dev/v3/projects/github.com%2Fkelektiv%2Fnode.bcrypt.js — retrieved 2026-10-29T08:25:23.895Z
https://api.deps.dev/v3/systems/npm/packages/bcrypt/versions/3.0.2 — retrieved 2026-10-29T11:31:39.711Z
https://api.deps.dev/v3/systems/npm/packages/bcrypt/versions/3.0.2:dependencies — retrieved 2026-10-29T11:31:39.725Z