{"id":15680986,"url":"https://github.com/zkat/srisum","last_synced_at":"2026-03-11T09:04:11.926Z","repository":{"id":57368633,"uuid":"86051539","full_name":"zkat/srisum","owner":"zkat","description":"Compute and check Subresource Integrity digests.","archived":false,"fork":false,"pushed_at":"2018-02-24T08:42:40.000Z","size":104,"stargazers_count":13,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"latest","last_synced_at":"2025-11-27T10:45:00.388Z","etag":null,"topics":["checksum","cli","security","subresource-integrity"],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/zkat.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-03-24T09:38:50.000Z","updated_at":"2025-07-16T23:27:56.000Z","dependencies_parsed_at":"2022-09-05T19:20:32.993Z","dependency_job_id":null,"html_url":"https://github.com/zkat/srisum","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"purl":"pkg:github/zkat/srisum","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zkat%2Fsrisum","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zkat%2Fsrisum/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zkat%2Fsrisum/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zkat%2Fsrisum/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/zkat","download_url":"https://codeload.github.com/zkat/srisum/tar.gz/refs/heads/latest","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zkat%2Fsrisum/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30376785,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-11T06:09:32.197Z","status":"ssl_error","status_checked_at":"2026-03-11T06:09:17.086Z","response_time":84,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["checksum","cli","security","subresource-integrity"],"created_at":"2024-10-03T16:47:55.251Z","updated_at":"2026-03-11T09:04:11.910Z","avatar_url":"https://github.com/zkat.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![npm](https://img.shields.io/npm/v/srisum.svg)](https://npm.im/srisum) [![license](https://img.shields.io/npm/l/srisum.svg)](https://npm.im/srisum) [![Travis](https://img.shields.io/travis/zkat/srisum.svg)](https://travis-ci.org/zkat/srisum) [![AppVeyor](https://ci.appveyor.com/api/projects/status/github/zkat/srisum?svg=true)](https://ci.appveyor.com/project/zkat/srisum) [![Coverage Status](https://coveralls.io/repos/github/zkat/srisum/badge.svg?branch=latest)](https://coveralls.io/github/zkat/srisum?branch=latest)\n\n# srisum(1) -- compute and check subresource integrity digests\n\n## SYNOPSIS\n\n`$ npx srisum [OPTION]... [FILE]...`\n\n## EXAMPLES\n\n### Computing SRI Digests\n\nFor a single file:\n```\n$ npx srisum styles.css \u003e styles.css.sri\n```\n\nFor multiple different files:\n```\n$ npx srisum styles.css index.js package.json bundle.js \u003e app.sri\n```\n\nFrom `stdin`:\n```\n$ cat styles.css | npx srisum -a sha1\nsha1-hmkHOZdrfLUVOqpAgryfC8XNGtE -\n```\n\nSpecify algorithms to generate:\n```\n$ npx srisum styles.css index.js --algorithms sha512 sha256 sha1 \u003e styles.css.sri\n```\n\nAdd options:\n```\n$ npx srisum styles.css -a sha1 --options releaser=Kat date=2017-01-01\nsha1-hmkHOZdrfLUVOqpAgryfC8XNGtE=?releaser=kat?date=2017-01-01 styles.css\n```\n\n### Checking Integrity\n\nPassing checksum file as an argument:\n```\n$ npx srisum -c styles.css.sri\nstyles.css: OK (sha512)\n```\n\nPassing multiple checksum files:\n```\n$ npx srisum -c styles.css.sri js-files.sri\nstyles.css: OK (sha512)\nindex.js: OK (sha512)\nlib/util.js: OK (sha512)\n```\n\nChecksum file from `stdin`:\n```\n$ cat styles.css.sri | npx srisum -c\nstyles.css: OK (sha512)\n```\n\nChecksum `stdin` itself:\n```\n$ echo \"hello\" | npx srisum \u003e stdin.sri\n$ echo \"hello\" | npx srisum -c stdin.sri\n-: OK (sha512)\n```\n\n## DESCRIPTION\n\nPrint or check Subresource Integrity digests.\n\nSpec: https://w3c.github.io/webappsec/specs/subresourceintegrity/\n\n`srisum`'s API is based on the `SHA[N]SUM(1)` family of unix utilities.\n\nWith no `FILE` or when `FILE` is `-`, read standard input.\n\n`-a, --algorithms [ALGO]...` - hash algorithms to generate for the `FILE`s\n\n`-s, --strict` - follow a strict interpretation of the SRI spec\n\n`-o, --options [OPT]...` - append given `OPT` strings to generated digests\n\n`-c, --check` - read SRI sums from the `FILE`s and check them\n\n`-d, --digest-only` - only output the digest for each `FILE`, without filenames\n\n`--help` - display help and exit\n\n`--version` - output version information and exit\n\n## The following options are useful only when verifying integrity:\n\n`--ignore-missing` - don't fail or report status for missing files\n\n`--quiet` - don't print OK for each successfully verified file\n\n`--status` - don't output anything, status code shows success\n\n`--strict` - exit non-zero for lines that fail strict SRI format\n\n`-w, --warn` - warn about improperly formatted SRI lines\n\nWhen checking, the input should be a former output of this program. The default mode is to print line with space-separated SRI digests, one more space, and a name for each FILE.\n\nStrict mode, enabled with `--strict`, will entirely ignore digests (in input and output) that fail all of the following conditions:\n\n* `algorithms` must be one or more of: `sha256`, `sha384`, `sha512`\n* `options` must be visual characters except for `?`.\n* digest strings must be valid `RFC4648` `Base64` strings.\n\n## AUTHOR\n\nWritten by [Kat Marchan](https://github.com/zkat)\n\n## REPORTING BUGS\n\nPlease file any relevant issues [on Github.](https://github.com/zkat/srisum)\n\n## LICENSE\n\nThis work is released under the terms of the MIT license. For more details, see\nthe LICENSE file included with this distribution.\n\n## SEE ALSO\n\n* `shasum(1)`\n* `sha1sum(1)`\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzkat%2Fsrisum","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fzkat%2Fsrisum","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzkat%2Fsrisum/lists"}