# pilcrowonpaper/oslo

A collection of auth-related utilities

Repository: https://github.com/pilcrowonpaper/oslo
Canonical: https://ross.abutalabs.com/products/oslo
Homepage: https://oslo.js.org
Language: TypeScript
License: MIT
License Family: permissive
Archived: true
Last push: 2025-01-20T06:32:59+00:00

## Health v2 (maintenance only)
Score: 10/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 2, release rhythm 8, longevity 75
- inputs: {"age_days": 1053, "days_push": 590, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: archived
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1148, forks 37 (observed 2026-08-28T04:03:46.234702+00:00)

## What it is
Oslo is a zero-dependency TypeScript collection of auth-related utilities covering JWTs, OAuth2, password hashing, OTP, WebAuthn, cookies, encoding, and CSRF protection. It is runtime-agnostic (Node.js, Deno, Bun, Cloudflare Workers) but has been deprecated in favor of packages published under the Oslo project.

## Use cases
- create and verify JWTs in a TypeScript app
- implement OAuth2 client flows
- hash and verify passwords
- add TOTP two-factor authentication
- verify WebAuthn passkey assertions
- parse and serialize cookies
- generate cryptographically strong random values
- add CSRF protection to requests

## When to choose
- you need lightweight, runtime-agnostic auth primitives without pulling a full auth framework
- you are building custom auth on edge runtimes like Cloudflare Workers or Deno
- you want typed, zero-dependency crypto, JWT, or WebAuthn helpers

## When to avoid
- starting a new project, since the package is deprecated in favor of the split Oslo project packages
- you want a batteries-included auth solution with sessions and user management
- you need support for Node.js 16/18 without polyfilling Web Crypto

## Facets
- artifact type: library
- maturity: abandoned
- function: auth, cryptography, serialization, security
- domain: security, web-development, developer-tools
- platform: bun, cross-platform
- tags: jwt, oauth2, webauthn, otp, password-hashing, cookies, encoding, deprecated, nodejs, deno

## Member repositories
- pilcrowonpaper/oslo (main) score 10

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:46.234702+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:33:51.170809+00:00, confidence not recorded.
  - readme: https://github.com/pilcrowonpaper/oslo (fetched 2026-08-28T04:03:46.234702+00:00, sha 6ea354d1e4cd)
  - homepage: https://oslo.js.org (fetched 2026-08-29T12:39:18.491970+00:00, sha 09922706afab)
  - registry_npm: https://registry.npmjs.org/oslo (fetched 2026-08-29T12:39:18.501139+00:00, sha 63e6b952ea36)
- Data as of 2026-08-30T08:39:29.467469+00:00.