{"id":"security.password-hash.bcryptjs","compat":{"runtime":"node@>=20"},"schema":"turbineh.component/v0.1","source":{"purl":"pkg:npm/bcryptjs@3.0.3","repo":"https://github.com/dcodeIO/bcrypt.js","integrity":"sha512-GlF5wPWnSa/X5LKM1o0wz0suXIINz1iHRLvTS+sLyi7XPbe5ycmYI3DlZqVGZZtDgl4DmasFg7gOB3JYbphV5g=="},"status":"approved","effects":{"db":false,"fs":false,"network":false,"external_services":[]},"license":{"declared":"BSD-3-Clause","detected":"BSD-3-Clause","obligations":["preserve-notice"]},"quality":{"tests":{"date":"2026-10-10","passed":true,"command":"contract.test.ts (vitest, sandbox --network none)"}},"version":"0.1.0","category":"security","contract":{"errors":["see contract.test.ts"],"inputs":["see contract.test.ts"],"limits":["see contract.test.ts"],"outputs":["see contract.test.ts"]},"evidence":[{"ref":"npm registry metadata bcryptjs@3.0.3","claim":"License BSD-3-Clause","origin":"maintainer"},{"ref":"https://api.osv.dev/v1/query","claim":"0 OSV advisories for bcryptjs@3.0.3 on 2026-10-10","origin":"tested"},{"ref":"/Users/alexruiz/TURBINEH/YES-IF-API-PRODUCT/code-api-turbineh/bench/results/2026-10-10-certify-batch-2.json","claim":"Contract tests pass in the sandbox without network","origin":"tested"}],"security":{"scope":"Known advisories for this exact version (OSV). Transitive dependencies are scanned when the component is assembled.","tools":["osv.dev-api"],"findings":[],"scanned_at":"2026-10-10"},"relations":{"provides":["security.password-hash"],"requires":[],"conflicts":[],"tested_with":["contract-harness"]},"capability":{"cons":[],"does":"bcrypt password hashing in pure JavaScript","pros":[],"does_not":"Does not enforce password policies","use_cases":["saas-crud","internal-tool","landing-waitlist","bookings","client-portal"],"alternatives":[]},"integration":{"config":[],"install":"pnpm add bcryptjs@3.0.3","strategy":"dependency","migrations":false}}