sha.js is a pure JavaScript implementation of SHA hashing, with a Node-style API for computing SHA-1, SHA-2 (such as SHA-256 and SHA-512), and related variants. It supports incremental updates for hashing large inputs without loading everything into memory at once.
Project status
- Maintenance status: The repository shows at least one recent modernization, with the latest tagged update (v2.4.12) on 2025-07-01 and an upstream push on 2025-10-23, but the overall history has very large gaps, suggesting quiet, maintenance-mode activity rather than active feature development.
- Update cadence: After v2.4.11 in 2018, the next updates arrive much later, and the only recent sequence is v2.4.11 (2018-03-20), v2.4.12 (2025-07-01), with prior major changes clustered years earlier (2015 to 2017). As of 2026-08-13, there have been no new updates for about a year since v2.4.12.
AI summary generated
Recent updates
v2.4.12
v2.4.12 does not include any publisher-provided release notes. The code diff shows a modernization pass (strict mode, lint/test tooling updates) plus a behavioral change in how Hash inputs are coerced, likely to fix hashing of certain typed array inputs.
Featuresv2.4.11
Release v2.4.11 contains no published release notes. The actual changes are limited to licensing text and metadata in the repository, plus the version bump in package.json.
v2.4.10
Release v2.4.10 was published on 2018-01-22, but no release notes were provided by the publisher. As a result, this release's functional changes, bug fixes, and any potential breaking changes cannot be determined from the provided information.
v2.4.9
v2.4.9 refactors sha.js internals to use safe-buffer APIs (Buffer.from, Buffer.alloc, Buffer.allocUnsafe) and updates tests and docs accordingly. The main functional change is in the message length handling during digest finalization, adding support for very large inputs. Release notes were not provided, so the changes below are inferred from the code diff.
Securityv2.4.8
This release (v2.4.8) includes minimal changes. The only code diff changes are a CI configuration update to test against Node.js 6 and a package version bump.
v2.4.7
This release (v2.4.7) primarily adds a new command line executable, exposing SHA hashing functionality via a CLI. No release notes were provided, so behavior changes must be inferred from the code diff.
Featuresv2.4.6
v2.4.6 is largely a refactor that moves the SHA implementations into new `lib/*` modules built on `hash-base`, adds new hash variants (SHA-224 and SHA-384), and updates the way the package exports its constructors. Release notes are missing, so the changes below may be surprising for existing users, especially those relying on prior named exports or the CLI.
BreakingFeaturesv2.4.5
Release v2.4.5 has no published release notes. The code diff shows a substantial internal refactor of multiple SHA implementations (SHA1, SHA256, SHA384, SHA512) and a CI configuration update for newer Node.js versions.
Breakingv2.4.4
Release v2.4.4 contains no documented release notes. The actual code changes are limited to internal refactoring of the SHA-256 and SHA-512 bitwise helper logic, including removal of shared rotation helpers and replacement with inlined Sigma/Gamma functions.
v2.4.3
Release v2.4.3 was published on 2015-09-14, but no release notes were provided by the publisher. As a result, this release cannot be assessed for new features, breaking changes, bug fixes, security updates, performance improvements, or migration/dependency changes based on the provided information.