Hashery is a JavaScript/TypeScript object hashing utility that works in both browsers and Node.js, using the WebCrypto API for SHA-256, SHA-384, and SHA-512. It also provides synchronous non-cryptographic hashes (such as djb2, FNV1, Murmur, and CRC32), with deterministic output, optional custom serialization, and helpers like “hash to number” for consistent number generation.
Project status
- Actively maintained, the most recent upstream push was 2026-10-18 and the newest package update (v3.0.5) landed 2026-10-18 with additional updates following closely in October 2026.
- Apparent update cadence is fairly steady, with updates on 10/18, 10/16, 10/05, and 09/14, suggesting ongoing maintenance rather than long dormancy.
AI summary generated
Recent updates
v3.0.5
v3.0.5 primarily updates vulnerable dependencies in the pnpm lockfiles and adds a Drydock review badge to the README. The only functional project-file change besides the version bump is a devDependency alignment for Vite, which matches the stated security fixes.
SecurityFeaturesv3.0.4
v3.0.4 primarily bumps the minimum dependency version of hookified from 3.0.3 to 3.0.4, alongside a batch of internal toolchain and CI upgrades. The release notes describe the changes at a high level, but the diff also shows several behavioral changes in development and cloud setup scripts that are not individually called out.
v3.0.3
v3.0.3 is primarily focused on publishing the hashery.dev documentation site. It adds a Cloudflare Pages deployment workflow and updates the Docula configuration so the site build writes a processed README into the site output, while also updating the README to link to hashery.dev.
Featuresv3.0.2
v3.0.2 is primarily a dependency and supply chain hardening release, upgrading the runtime dependency hookified to 3.0.3 plus updating multiple toolchain and code quality dev dependencies. The GitHub workflows and repo security posture were also significantly strengthened (pinned actions, Safe Chain bootstrapping, Aikido release scanning, Socket Firewall wrapping, and stage-only npm publishing). No application/library source code changes are visible in the provided diff.
Securityv3.0.1
v3.0.1 is described as a housekeeping patch with documentation updates and dependency/tooling refreshes only. The release notes explicitly state there are no library code changes, but they do include a v2 to v3 migration guide update in the README.
Breakingv3.0.0
v3.0.0 primarily modernizes the project toolchain, switching to pnpm 11 via corepack and raising the minimum supported Node.js version to 22.18. The only runtime-impacting library change indicated by the diff is upgrading the dependency hookified from 2.x to 3.0.0; the rest of the changes are build, CI, and documentation/tooling upgrades.
Breakingv2.0.0
v2.0.0 primarily upgrades underlying dependencies and the build pipeline. The release notes call out the hookified upgrade as breaking, but they do not spell out the concrete Hashery API changes that result from it.
Breakingv1.5.1
v1.5.1 primarily updates the transitive dependency hookified from v1.14.x to v1.15.0. The only other changes are documentation badge URL updates in README.md, and the package version bump to 1.5.1.
v1.5.0
v1.5.0 adds support for using hash providers directly, introduces an Agents-related feature, and updates benchmarking and documentation tooling. It also fixes hook behavior for synchronous hashing and adds/adjusts hook execution so hooks can affect outputs more consistently.
Featuresv1.4.0
v1.4.0 adds a new 'warn' event that fires when an invalid or unknown hash algorithm is requested, and the library falls back to a default algorithm instead of failing in that case. The release also bumps several dev/tooling dependencies, updates CI to test Node.js 24, and adds a new benchmark comparing Hashery Web Crypto performance with Node's built-in crypto.
Featuresv1.3.0
v1.3.0 adds a built-in FIFO cache to reuse computed hash results and includes additional benchmarking improvements (sync/async coverage and preloading fake data). It also adjusts package export definitions to be more robust for ESM and CommonJS consumers. The code change introduces new public caching APIs and changes runtime behavior by default.
Featuresv1.2.0
v1.2.0 adds new synchronous hashing APIs, including a configurable default synchronous algorithm via `defaultAlgorithmSync`. It also introduces `toHashSync` and `toNumberSync` to support fast, non-WebCrypto hashing for algorithms like djb2, fnv1, murmer, and crc32. The release notes only mention these new features, but the code diff also includes provider and build pipeline changes.
Featuresv1.1.0
v1.1.0 introduces option objects for both Hashery.toHash and Hashery.toNumber, and adds a Hashery.defaultAlgorithm setting that is used when no algorithm is provided per-call. It also adds hash truncation support for toHash via a maxLength option. The README and tests were updated to use the new option-object calling style.
Featuresv1.0.0
v1.0.0 adds a substantial set of new hashing capabilities, including new provider support (with Web Crypto), additional hash algorithms, and conversion helpers like toHash and toNumber. It also expands configuration surface with parse and stringify options/properties, and introduces constructor support, hooks, and additional documentation badges.
Features