@evervault/sdk - npm Package Compare versions

Comparing version 5.1.3 to 5.1.4

lib/config.js

@@ -7,2 +7,3 @@ const { version } = require('../package.json');
 const DEFAULT_CAGES_CA_HOSTNAME = 'https://cages-ca.evervault.com';
+const DEFAULT_CAGES_BETA_HOSTNAME = 'cages.evervault.com';
 const DEFAULT_CAGES_HOSTNAME = 'cage.evervault.com';
@@ -23,2 +24,4 @@ const DEFAULT_ENCLAVES_HOSTNAME = 'enclave.evervault.com';
       process.env.EV_CAGE_CERT_HOSTNAME || DEFAULT_CAGES_CA_HOSTNAME,
+    cagesBetaHostname:
+      process.env.EV_CAGES_BETA_HOSTNAME || DEFAULT_CAGES_BETA_HOSTNAME,
     cagesHostname: process.env.EV_CAGES_HOSTNAME || DEFAULT_CAGES_HOSTNAME,
@@ -25,0 +28,0 @@ enclavesHostname:

lib/utils/attest.js

@@ -145,3 +145,3 @@ const certHelper = require('./certHelper');
     // only attempt attestation if the host is a cage
-    if (hostname.endsWith(config.cagesHostname)) {
+    if (hostname.endsWith(config.cagesBetaHostname)) {
       // we expect undefined when attestation is successful, else an error
@@ -165,3 +165,6 @@ const attestationResult = attestCageConnectionBeta(
     // only attempt attestation if the host is a cage
-    if (hostname.endsWith(config.cagesHostname)) {
+    if (
+      hostname.endsWith(config.cagesHostname) ||
+      hostname.endsWith(config.enclavesHostname)
+    ) {
       // we expect undefined when attestation is successful, else an error
@@ -168,0 +171,0 @@ const attestationResult = attestCageConnection(

package.json

 {
   "name": "@evervault/sdk",
-  "version": "5.1.3",
+  "version": "5.1.4",
   "description": "Node.js SDK for Evervault",
@@ -5,0 +5,0 @@ "main": "lib/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

76882

increased by0.29%

Lines of code

2456

increased by0.24%

Worsened metrics

Number of low supply chain risk alerts

13

increased by8.33%

No dependency changes