@harmony-js/crypto - npm Package Compare versions

Comparing version 0.1.56 to 0.1.58

dist/keystore.js

@@ -10,4 +10,3 @@ "use strict";
 var aes_js_1 = tslib_1.__importDefault(require("aes-js"));
-// import scrypt from 'scrypt.js';
-var scrypt_shim_1 = tslib_1.__importDefault(require("scrypt-shim"));
+var scrypt_js_1 = tslib_1.__importDefault(require("scrypt.js"));
 var pbkdf2_1 = require("pbkdf2");
@@ -44,3 +43,3 @@ var uuid_1 = tslib_1.__importDefault(require("uuid"));
                 _b = params, n = _b.n, r = _b.r, p = _b.p, dklen = _b.dklen;
-                return [2 /*return*/, scrypt_shim_1.default(key, salt, n, r, p, dklen)];
+                return [2 /*return*/, scrypt_js_1.default(key, salt, n, r, p, dklen)];
             }
@@ -47,0 +46,0 @@ throw new Error('Only pbkdf2 and scrypt are supported');

package.json

 {
   "name": "@harmony-js/crypto",
-  "version": "0.1.56",
+  "version": "0.1.58",
   "description": "crypto libraries for harmony",
@@ -21,3 +21,3 @@ "main": "dist/index.js",
   "dependencies": {
-    "@harmony-js/utils": "0.1.56",
+    "@harmony-js/utils": "0.1.58",
     "aes-js": "^3.1.2",
@@ -31,6 +31,6 @@ "bip39": "^2.5.0",
     "pbkdf2": "^3.0.17",
-    "scrypt-shim": "github:web3-js/scrypt-shim",
+    "scrypt.js": "^0.3.0",
     "uuid": "^3.3.2"
   },
-  "gitHead": "8f8e17fdaed394af1c28cd133d6018bf48915a81"
+  "gitHead": "5eddd0feb2bfe92c36b194fe0a9ffe40f8173d6c"
 }

src/keystore.ts

@@ -7,4 +7,3 @@ /**
 import aes from 'aes-js';
-// import scrypt from 'scrypt.js';
-import scrypt from 'scrypt-shim';
+import scrypt from 'scrypt.js';
 import { pbkdf2Sync } from 'pbkdf2';
@@ -11,0 +10,0 @@ import uuid from 'uuid';

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

969898

increased by104.97%

Number of package files

80

increased by9.59%

Lines of code

12728

increased by67.41%

Number of high supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedscrypt.js@^0.3.0

• + Added@harmony-js/utils@0.1.58(transitive)

• + Addedscrypt@6.0.3(transitive)

• + Addedscrypt.js@0.3.0(transitive)

• + Addedscryptsy@1.2.1(transitive)

• - Removedscrypt-shim@github:web3-js/scrypt-shim

• - Removed@harmony-js/utils@0.1.56(transitive)

• Updated@harmony-js/utils@0.1.58