Awesome Open

Project record

OpenPGP.js

OpenPGP.jsOpenPGP implementation for JavaScript.LGPL-3.0
Field notes / 370OpenPGP.js
I / Function

OpenPGP implementation for JavaScript.

OpenPGP.js is a JavaScript library for adding OpenPGP message and key operations to browser and Node.js applications. It encrypts and decrypts text or binary data with public keys or passwords, creates and verifies signatures, and generates or revokes keys. Streaming interfaces allow applications to process larger messages without first representing the entire input as a single string.

OpenPGP.js README · Reviewed 2026-10-28

Two cobalt ceramic seed halves reveal matching ridges around a folded white ribbon.
Awesome Open* · Field recordOpenPGP.jsOP-84584367 · Folio 370Domain: Security & Privacy
  1. 01 / Feature noteMessage encryption

    Encrypt and decrypt text or binary messages using public keys or passwords.

    Feature source ↗
  2. 02 / Feature noteDigital signatures

    Create and verify signed messages, including detached signatures.

    Feature source ↗
II / Repository record

GitHub stars

5,976

Detected license

LGPL-3.0

Repository created

2011-11-13

Repository push

2026-11-01

III / Observations & evidence

GitHub stars

Unknown

i
Window mismatch; awaiting refresh

Cached history uses a different month window; chart withheld until aligned.

Latest attempt: ok · Checked 2026-10-15T23:34:55.975088+00:00 · Last successful fetch 2026-10-15T23:34:55.975088+00:00 · Provider source

Hacker News stories

Unknown

i
Not recorded

OpenSSF Scorecard

7.2/10

Scanned 2026-10-19 · 11 scored / 14 returned

i
Partial
  • Maintained · 10/10

    30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10

  • Security-Policy · 10/10

    security policy file detected

  • Dangerous-Workflow · 10/10

    no dangerous workflow patterns detected

  • Code-Review · 8/10

    Found 8/9 approved changesets -- score normalized to 8

  • Packaging · Inconclusive

    packaging workflow not detected

  • Binary-Artifacts · 10/10

    no binaries found in the repo

  • Token-Permissions · 8/10

    detected GitHub workflow tokens with excessive permissions

  • Pinned-Dependencies · 2/10

    dependency not pinned by hash detected -- score normalized to 2

  • CII-Best-Practices · 0/10

    no effort to earn an OpenSSF best practices badge detected

  • License · 10/10

    license file detected

  • Fuzzing · 0/10

    project is not fuzzed

  • Signed-Releases · Inconclusive

    no releases found

  • Branch-Protection · Inconclusive

    internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md

  • SAST · 3/10

    SAST tool is not run on all commits -- score normalized to 3

Repository commit 8bc35df48879 · Scorecard v5.6.0

Checked 2026-11-03T04:42:53Z · Last successful fetch 2026-11-03T04:42:53Z · Value fetched 2026-11-03T04:42:53Z · Provider source

IV / Release record

GitHub release

v6.3.2

Published 2026-09-24

i
Available

Checked 2026-11-04T04:04:05Z · Last successful fetch 2026-11-04T04:04:05Z · Value fetched 2026-11-04T04:04:05Z · Provider source

V / Where it runs

Unknown

i
Not reviewed