@aptoma/aoi-smart-crop - npm Package Compare versions

Comparing version 0.4.1 to 1.0.0

lib/index.js

 'use strict';
 
 const qs = require('qs');
-const crypto = require('crypto');
+const hmacSHA256 = require('crypto-js/hmac-sha256');
 
@@ -50,6 +50,3 @@ const cropper = require('./crop');
 		function createSignature(key, url) {
-			return crypto
-				.createHmac('sha256', Buffer.from(key, 'utf8'))
-				.update(url)
-				.digest('hex');
+			return hmacSHA256(url, key);
 		}
@@ -56,0 +53,0 @@ }

package.json

@@ -7,3 +7,3 @@ {
   },
-  "version": "0.4.1",
+  "version": "1.0.0",
   "description": "Helper library for doing smart crops of images based on area of interest data",
@@ -14,5 +14,5 @@ "main": "lib/index.js",
     "prerelease": "npm run lint && npm run test",
-    "release": "npm run prerelease && release-it -n -i patch",
-    "release:minor": "npm run prerelease && release-it -n -i minor",
-    "release:major": "npm run prerelease && release-it -n -i major",
+    "release": "npm run prerelease && release-it -i patch",
+    "release:minor": "npm run prerelease && release-it -i minor",
+    "release:major": "npm run prerelease && release-it -i major",
     "test": "mocha lib/**/*.test.js",
@@ -28,13 +28,15 @@ "watch": "mocha --watch 'lib/**/*.js' --timeout 500"
   "dependencies": {
-    "qs": "^6.6.0"
+    "crypto-js": "^4.0.0",
+    "qs": "^6.10.1"
   },
   "devDependencies": {
     "@aptoma/eslint-config": "^7.0.1",
-    "chai": "^4.2.0",
-    "eslint": "^5.9.0",
-    "mocha": "^5.2.0",
-    "release-it": "^8.2.0"
+    "auto-changelog": "^2.3.0",
+    "chai": "^4.3.4",
+    "eslint": "^7.30.0",
+    "mocha": "^9.0.2",
+    "release-it": "^14.10.0"
   },
   "engines": {
-    "node": ">=8"
+    "node": ">=14"
   },
@@ -41,0 +43,0 @@ "eslintConfig": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Number of low quality alerts

1

decreased by-50%

Worsened metrics

Dependency count

2

increased by100%

Dev dependency count

6

increased by20%

Lines of code

608

decreased by-0.49%

Dependency changes

• + Addedcrypto-js@^4.0.0

• + Addedcrypto-js@4.2.0(transitive)

• Updatedqs@^6.10.1