@ledgerhq/hw-app-btc - npm Package Compare versions

Comparing version 2.2.0-beta.9d29a5c6 to 2.2.0

lib/Btc.js

@@ -578,5 +578,6 @@ "use strict";
           }
-
-          targetTransaction.inputs[_i].prevout = trustedInputs[_i].value.slice(4, 4 + 0x24);
+          var offset = segwit ? 0 : 4;
+          targetTransaction.inputs[_i].prevout = trustedInputs[_i].value.slice(offset, offset + 0x24);
         }
+        targetTransaction.witness = Buffer.alloc(0);
 
@@ -583,0 +584,0 @@ var lockTimeBuffer = Buffer.alloc(4);

package.json

 {
   "name": "@ledgerhq/hw-app-btc",
-  "version": "2.2.0-beta.9d29a5c6",
+  "version": "2.2.0",
   "description": "Ledger Hardware Wallet Bitcoin Application API",
@@ -28,3 +28,3 @@ "keywords": [
   "dependencies": {
-    "@ledgerhq/hw-transport": "^2.2.0-beta.9d29a5c6",
+    "@ledgerhq/hw-transport": "^2.2.0",
     "create-hash": "^1.1.3"
@@ -31,0 +31,0 @@ },

src/Btc.js

@@ -623,8 +623,9 @@ //@flow
           }
-
+          let offset = segwit ? 0 : 4;
           targetTransaction.inputs[i].prevout = trustedInputs[i].value.slice(
-            4,
-            4 + 0x24
+            offset,
+            offset + 0x24
           );
         }
+        targetTransaction.witness = Buffer.alloc(0);
 
@@ -631,0 +632,0 @@ const lockTimeBuffer = Buffer.alloc(4);

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

187560

increased by0.25%

Lines of code

2184

increased by0.18%

Number of low quality alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• Updated@ledgerhq/hw-transport@^2.2.0