ssri npm package downloads show a generally upward trend from March 2024 to July 2025, peaking at over 160 million in June 2025. August 2025 saw a dip, and September 2025 (partial data) shows significantly lower downloads, likely due to incomplete monthly data.
ssri is a Node.js library implementing Subresource Integrity (SRI) hash generation and verification according to the W3C specification. It facilitates secure delivery of static assets by generating cryptographic hashes, ensuring files haven't been tampered with. ssri supports various hashing algorithms (SHA-256, SHA-384, SHA-512) and provides utilities for parsing, serializing, and comparing SRI strings. This library is crucial for web security, safeguarding against malicious code injection and ensuring data integrity.
The npm package ssri saw frequent releases in 2017 and 2018, with several versions within each month. Release frequency decreased significantly after 2018, with occasional releases in 2019-2024. There have been no releases in 2025 as of September 10th. The most recent versions are 11.0.0 and 12.0.0, released in September 2024.
