@fastify/csrf - npm Package Compare versions

Comparing version 6.3.0 to 7.0.0-pre.fv5.1

package.json

 {
   "name": "@fastify/csrf",
   "description": "primary logic behind csrf tokens",
-  "version": "6.3.0",
+  "version": "7.0.0-pre.fv5.1",
   "author": "Jonathan Ong <[e-mail]> (http://jongleberry.com)",
@@ -30,8 +30,8 @@ "main": "index.js",
   "devDependencies": {
-    "@types/node": "^20.1.0",
+    "@types/node": "^20.11.30",
     "beautify-benchmark": "^0.2.4",
     "benchmark": "^2.1.4",
-    "standard": "^17.0.0",
-    "tap": "^16.3.0",
-    "tsd": "^0.29.0"
+    "standard": "^17.1.0",
+    "tap": "^18.7.1",
+    "tsd": "^0.31.0"
   },
@@ -38,0 +38,0 @@ "keywords": [

test/secret.test.js

 'use strict'
 
-const { test, mock } = require('tap')
+const { test, mockRequire } = require('tap')
 const Tokens = require('..')
@@ -78,3 +78,3 @@
 
-  const Tokens = mock('..', {
+  const Tokens = mockRequire('..', {
     'node:crypto': {
@@ -97,3 +97,3 @@ randomBytes: (_size, cb) => {
 
-  const Tokens = mock('..', {
+  const Tokens = mockRequire('..', {
     'node:crypto': {
@@ -100,0 +100,0 @@ randomBytes: (size, cb) => {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

41853

increased by0.2%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes