# Install sha.js with npm

Streamable SHA hashes in pure javascript. Version 2.4.12 via npm; verified 2025-07-01.

## Install

```sh
sudo av install npm:sha.js
```

Additional install commands:

### Portable and language managers

- npm (100%):

```sh
npm install -g sha.js
```

  Evidence: local npm package metadata

## Package facts

- **Package key:** npm:sha.js
- **Package manager:** npm
- **Package manager page:** <https://www.npmjs.com/package/sha.js>
- **Version:** 2.4.12
- **Source summary:** Streamable SHA hashes in pure javascript
- **Homepage:** <https://github.com/crypto-browserify/sha.js>
- **Repository:** <https://github.com/crypto-browserify/sha.js>
- **Upstream docs:** <https://github.com/crypto-browserify/sha.js>
- **License:** (MIT AND BSD-3-Clause)
- **Source archive:** <https://registry.npmjs.org/sha.js/-/sha.js-2.4.12.tgz>
- **Issue tracker:** <https://github.com/crypto-browserify/sha.js/issues>
- **Published:** 2025-07-01T17:46:33.039Z
- **Last updated:** 2025-07-01T17:46:33.039Z
- **Generated:** 2026-07-08T18:08:21+00:00

## Executables

- sha.js (cli)
- sha.js (alias)

## Dependencies

- inherits
- safe-buffer
- to-buffer

## Build dependencies

- @ljharb/eslint-config
- auto-changelog
- encoding
- eslint
- hash-test-vectors
- npmignore
- tape
- typedarray

## Install behavior

- Post-install hook: not defined
- Bottle: not available

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.4.12
- Package-manager updated: 2025-07-01
- Local data: ok
- Upstream repository: https://github.com/crypto-browserify/sha.js
- warning: The package-manager record has not been updated in over a year.
- info: No cached GitHub release or tag data was available.

## Security Notes

No matching local secret-handling manifest was found for sha.js. Nucleus package metadata is still published here so future coverage has a stable package URL.


## Source Database Details

- **Source Database:** npm registry
- **Dist Tags:** Latest: 2.4.12
- **Version Count:** 40
- **Maintainers:** ljharb, dcousens, cwmma
- **Author:** Dominic Tarr
- **Publisher:** ljharb
- **Engines:** Node: >= 0.10
- **Funding:** <https://github.com/sponsors/ljharb>
- **Integrity:** sha512-8LzC5+bvI45BjpfXU8V5fdU2mfeKiQe1D1gIMn7XUlF3OTUrpdJpPPH4EMAnF0DsHHdSZqCdSss5qCmJKuiO3w==
- **Shasum:** eb8b568bf383dfd1867a32c3f2b74eb52bdbf23f
- **Unpacked Size:** 66,073
- **File Count:** 0
- **Created At:** 2013-12-27T05:28:03.917Z
- **Latest Published At:** 2025-07-01T17:46:33.039Z
- **Modified At:** 2025-07-01T17:46:33.220Z


## Related links

- [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched curated package taxonomy and local package facts.
- [sifter](https://www.automicvault.com/pkg/npm/sifter/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, cryptography, hashes, javascript, security.
- [snarkjs](https://www.automicvault.com/pkg/npm/snarkjs/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, cryptography, hashes, javascript, security.
- [bcryptjs](https://www.automicvault.com/pkg/npm/bcryptjs/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, cryptography, javascript, security.

## Sources

- Nucleus package database
- package-page enrichment
- package version freshness
- av.db category and tag curation
- package relationship graph
- cross-ecosystem install command graph