npm package
Homepackage-hash
package-hash generates a hash for an installed npm package, which is useful for salting caches. It can create a hash based on the package location and its package. json file, including Git repository details for easier debugging.
- lurq health score
- 42/100
- Confidence
- unproven
- Weekly downloads
- 5,488,322
- Latest version
- 4.0.0
- Last release
- Apr 9, 2019
- License
- ISC
Should you depend on package-hash?
lurq's verdict: low
- No known advisories
Check this from your coding agent
This page is a daily snapshot. lurq's verify tool checks package-hash at the exact version your agent is about to install, and compat checks it against the rest of your stack. One command connects Claude Code, Cursor, VS Code and other agents:
npx lurqrun
Free to start. Quickstart
Upgrading package-hash
What each major version removed, renamed or re-signatured, from lurq's extraction of the published packages.
- 3.0.0 → 4.0.0diff ready
- 2.0.0 → 3.0.0being extracted
- 1.2.0 → 2.0.0being extracted
Other testing packages lurq scores
- fast-check94/100 · proven
- marked93/100 · proven
- @middy/util93/100 · proven
- jsdom90/100 · proven
- mocha90/100 · proven
Scored from public signals (npm registry, GitHub, deps.dev and advisory databases). Data as of Sep 21, 2026; this page refreshes every 168 hours. Source repository.