http-signature
Reference implementation of Joyent's HTTP Signature scheme.
http-signature@1.4.0 was published on 2023-11-15. Its manifest declares 3 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.10.
All http-signature versions · Permanent reference to 1.4.0
Package specifications
| Version | 1.4.0 |
|---|---|
| License declaration | MIT |
| Published | 2023-11-15T21:33:31.601Z |
| Node.js requirement | >=0.10 |
| Type declarations | Not declared |
| Runtime dependency count | 3 |
| Peer requirement count | 0 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 37.65 KiB |
| Published file count | 8 |
| Package type | Not declared |
| ES module entry | Not declared |
| Default entry | lib/index.js |
| Side effects declaration | Not declared |
| Direct advisories | 0 |
| Resolved graph dependencies | 15 |
| Repository stars | 404 |
| Repository forks | 118 |
Install http-signature 1.4.0
npm install http-signature@1.4.0 pnpm add http-signature@1.4.0 yarn add http-signature@1.4.0
Runtime dependencies
- sshpk ^1.18.0
- jsprim ^2.0.2
- assert-plus ^1.0.0
Peer requirements
- None declared
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- asn1@0.2.6 — indirect
- assert-plus@1.0.0 — direct
- bcrypt-pbkdf@1.0.2 — indirect
- core-util-is@1.0.2 — indirect
- dashdash@1.14.1 — indirect
- ecc-jsbn@0.1.2 — indirect
- extsprintf@1.3.0 — indirect
- getpass@0.1.7 — indirect
- jsbn@0.1.1 — indirect
- json-schema@0.4.0 — indirect
- jsprim@2.0.2 — direct
- safer-buffer@2.1.2 — indirect
- sshpk@1.18.0 — direct
- tweetnacl@0.14.5 — indirect
- verror@1.10.0 — indirect
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Evidence and freshness
- https://registry.npmjs.org/http-signature/1.4.0 — retrieved 2026-10-29T06:00:58.911Z (stale snapshot; refresh pending)
- https://api.deps.dev/v3/projects/github.com%2FTritonDataCenter%2Fnode-http-signature — retrieved 2026-10-29T06:00:59.487Z
- https://api.deps.dev/v3/systems/npm/packages/http-signature/versions/1.4.0:dependencies — retrieved 2026-10-29T07:11:34.845Z
- https://api.deps.dev/v3/systems/npm/packages/http-signature/versions/1.4.0 — retrieved 2026-10-29T07:11:34.955Z