@authenio/xml-encryption - npm Package Compare versions

Comparing version 1.2.2 to 1.2.4

package.json

 {
   "name": "@authenio/xml-encryption",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "devDependencies": {
@@ -25,5 +25,9 @@ "mocha": "^7.1.2",
     "node-forge": "^0.10.0",
-    "xmldom": "~0.1.15",
-    "xpath": "0.0.27"
+    "xmldom": "~0.6.0",
+    "xpath": "0.0.32"
   },
+  "files": [
+    "lib",
+    "package-lock.json"
+  ],
   "scripts": {
@@ -30,0 +34,0 @@ "test": "mocha"

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

64621

increased by3.37%

Lines of code

1459

increased by168.2%

Number of low supply chain risk alerts

2

decreased by-50%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Number of package files

9

decreased by-64%

Dependency changes

• + Addedxmldom@0.6.0(transitive)

• + Addedxpath@0.0.32(transitive)

• - Removedxmldom@0.1.31(transitive)

• - Removedxpath@0.0.27(transitive)

• Updatedxmldom@~0.6.0

• Updatedxpath@0.0.32