@fastify/csrf - npm Package Compare versions

Comparing version 6.2.0 to 6.3.0

benchmark/create.js

@@ -0,1 +1,2 @@
+'use strict'
 
@@ -2,0 +3,0 @@ /**

benchmark/index.js

@@ -1,5 +0,7 @@
-const fs = require('fs')
-const path = require('path')
-const spawn = require('child_process').spawn
+'use strict'
 
+const fs = require('node:fs')
+const path = require('node:path')
+const spawn = require('node:child_process').spawn
+
 const exe = process.argv[0]
@@ -6,0 +8,0 @@ const cwd = process.cwd()

benchmark/secret.js

@@ -0,1 +1,2 @@
+'use strict'
 
@@ -2,0 +3,0 @@ /**

benchmark/verify.js

@@ -0,1 +1,2 @@
+'use strict'
 
@@ -2,0 +3,0 @@ /**

index.js

@@ -11,3 +11,3 @@ 'use strict'
 
-const crypto = require('crypto')
+const crypto = require('node:crypto')
 
@@ -14,0 +14,0 @@ /**

package.json

 {
   "name": "@fastify/csrf",
   "description": "primary logic behind csrf tokens",
-  "version": "6.2.0",
+  "version": "6.3.0",
   "author": "Jonathan Ong <[e-mail]> (http://jongleberry.com)",
   "main": "index.js",
+  "type": "commonjs",
   "types": "types/index.d.ts",
@@ -29,3 +30,3 @@ "contributors": [
   "devDependencies": {
-    "@types/node": "^18.14.6",
+    "@types/node": "^20.1.0",
     "beautify-benchmark": "^0.2.4",
@@ -35,3 +36,3 @@ "benchmark": "^2.1.4",
     "tap": "^16.3.0",
-    "tsd": "^0.25.0"
+    "tsd": "^0.29.0"
   },
@@ -38,0 +39,0 @@ "keywords": [

test/secret.test.js

@@ -79,7 +79,7 @@ 'use strict'
   const Tokens = mock('..', {
-    crypto: {
+    'node:crypto': {
       randomBytes: (_size, cb) => {
         cb(new Error('oh no'))
       },
-      createHash: require('crypto').createHash
+      createHash: require('node:crypto').createHash
     }
@@ -98,7 +98,7 @@ })
   const Tokens = mock('..', {
-    crypto: {
+    'node:crypto': {
       randomBytes: (size, cb) => {
         cb(new Error('oh no'))
       },
-      createHash: require('crypto').createHash
+      createHash: require('node:crypto').createHash
     }
@@ -105,0 +105,0 @@ })

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

41768

increased by0.63%

Number of package files

22

increased by4.76%

Lines of code

987

increased by0.41%

Number of medium supply chain risk alerts

1

decreased by-50%

No dependency changes