Moderne licensed

Find `crypto.createDecipheriv()` for AEAD ciphers without `authTagLength`

Recipe IDorg.openrewrite.node.migrate.crypto.find-aead-decipheriv-without-auth-tag-lengthArtifact@openrewrite/recipes-nodejs

Accepting shorter-than-default authentication tags for AEAD ciphers (aes-*-gcm, aes-*-ccm, aes-*-ocb, chacha20-poly1305) in crypto.createDecipheriv() is end-of-life in Node.js 26 (DEP0182). Pass an explicit authTagLength in the options so the tag length is validated at decipher construction instead of at setAuthTag() time.

Single recipeDEP0182Proprietary

Usage

This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.

mod run . --recipe org.openrewrite.node.migrate.crypto.find-aead-decipheriv-without-auth-tag-length

If the recipe isn’t available locally, install it with:

mod config recipes npm install @openrewrite/recipes-nodejs