@smithy/signature-v4
A standalone implementation of the AWS Signature V4 request signing algorithm
npm says
133,885,501
per week
Every tarball fetch: mirrors, scanners, CI and people.
real installs
high confidence≈ 134M
per week
Mirror spikes and crawlers removed. CI and dependency installs still count, so this is not a head count.
noise under 1% of npm's count, so nearly all of it counts. noise real installs
Why this estimate
With JavaScript on, this lists what the filter found for this package.
Most used major version: 5, the latest one, with 88% of last week's downloads above the crawler floor. Most used single version: 5.7.4.
Snapshot from the daily build of Nov 10, 2026, last 7 days of npm data. With JavaScript on, this page recomputes it live from the npm API.
How many people use @smithy/signature-v4?
npm counted 133,885,501 downloads of @smithy/signature-v4 in the last 7 days. Nobody can count people exactly, npm included: it does not record who downloaded what. After removing mirror spikes and crawlers, about 134M look like real installs. At this scale most of them come from CI, builds and other packages that depend on @smithy/signature-v4, so the number of people behind them is far smaller.
Is @smithy/signature-v4 still maintained?
Most likely yes, going by its releases. The latest version, 5.7.5, came out on Oct 29, 2026. The last 12 months saw 41 stable releases, typically 5 days apart. It was first published on Jun 19, 2023. npm lists 2 maintainers.
Is @smithy/signature-v4 still used?
Downloads with publish spikes removed are up 70% over 3 months and up 284% over 11 months. For scale, the median of the 384 packages we track, which lean towards today's most downloaded, is up 164% over 11 months, so this one is ahead of that. Last week, 88% of downloads above the crawler floor were on major version 5, the latest one; the most used single version was 5.7.4, with 19%. Weekdays get 1.9× the downloads of weekends, which fits people at work, though CI follows the same rhythm. Crawlers account for about 1,422,595 downloads a week, roughly 13,679 per version.
Monthly downloads of @smithy/signature-v4
The busiest month was Oct 2026, with about 15,965,274 downloads a day once publish spikes are removed; the quietest was Dec 2025 (the holiday season), with about 4,168,378.
| month | npm downloads | publish spikes removed | real installs | vs month before |
|---|---|---|---|---|
| Oct 2026 | 415,097,116 | 0 | 415M | up 23% |
| Sep 2026 | 351,731,507 | 0 | 352M | up 20% |
| Aug 2026 | 336,526,642 | 0 | 336M–337M | up 10% |
| Jul 2026 | 306,532,300 | 0 | 306M–307M | up 11% |
| Jun 2026 | 266,146,547 | 0 | 266M | up 21% |
| May 2026 | 227,345,928 | 0 | 227M | up 6% |
| Apr 2026 | 208,017,748 | 0 | 208M | up 5% |
| Mar 2026 | 204,009,892 | 0 | 204M | up 17% |
| Feb 2026 | 157,524,678 | 0 | 157M–158M | up 18% |
| Jan 2026 | 148,418,142 | 0 | 148M | up 15% |
| Dec 2025 | 129,219,725 | 0 | 129M | — |
Whole months through Oct 31, 2026. Publish spikes are found day by day and summed per month. Real installs apply this week's crawler share to each month's downloads (the upper end also keeps the removed spikes), so they follow npm's curve rather than measure it. The change compares spike-free downloads per day.
How the estimate works
- Cut the spike every new version gets from mirrors in its first days.
- Subtract the flat floor robots download from every version each week.
- Show what is left as a range, with a confidence level. It still includes CI and dependency installs, so it is not a count of people.