Drop-in API
Each package is a drop-in replacement for a popular Node.js package. Where it is not a 100% drop-in, a MIGRATION.md says what differs.
Prebuilt native binaries
Compiled with NAPI-RS for six targets: Linux x64 (glibc and musl), Linux ARM64, macOS x64 and ARM64, Windows x64. No build step on install, no compiler required.
WASM build for browsers
Most packages ship a napi binary for Node.js and a WASM build for browsers and bundlers (Vite, esbuild, webpack ≥ 5, Rollup) in the same tarball. Conditional exports pick the right one; the import never changes.
Server-only where it matters
argon2, jose and jwt stay Node-only on purpose — browser password hashing is an anti-pattern, and private signing keys must not ship to the browser.
Zero dependencies
No transitive dependencies — installing a package pulls in the package and its platform binary, nothing else.
Measured, not claimed
Every package is benchmarked against the best JavaScript alternative and checked against the upstream package's behavior with conformance tests. A perf review classifies each one Green, Yellow, Red or Black.
Published with provenance
Releases are built in CI and published to npm with provenance, so every tarball can be traced back to the commit and workflow that built it.