@peculiar/x509 - npm Package Compare versions

Comparing version 1.14.3 to 2.0.0

package.json

 {
   "name": "@peculiar/x509",
-  "version": "1.14.3",
+  "version": "2.0.0",
   "description": "@peculiar/x509 is an easy to use TypeScript/Javascript library based on @peculiar/asn1-schema that makes generating X.509 Certificates and Certificate Requests as well as validating certificate chains easy",
@@ -54,2 +54,3 @@ "main": "build/x509.cjs.js",
   "devDependencies": {
+    "@abraham/reflection": "^0.13.0",
     "@babel/core": "^7.28.5",
@@ -81,3 +82,2 @@ "@babel/preset-env": "^7.28.5",
     "pvtsutils": "^1.3.6",
-    "reflect-metadata": "^0.2.2",
     "tslib": "^2.8.1",
@@ -84,0 +84,0 @@ "tsyringe": "^4.10.0"

README.md

@@ -16,2 +16,3 @@ <h1 align="center">
 - [About](#about)
+- [⚠️ Reflect Polyfill Required](#-reflect-polyfill-required)
 - [Installation](#installation)
@@ -33,2 +34,20 @@ - [Documentation](#documentation)
 
+## ⚠️ Reflect Polyfill Required
+
+**This library requires a Reflect API polyfill.** You must install one of the following and import it at the top of your entry point:
+
+- [reflect-metadata](https://www.npmjs.com/package/reflect-metadata)
+- [core-js](https://www.npmjs.com/package/core-js) (`core-js/full/reflect`)
+- [@abraham/reflection](https://www.npmjs.com/package/@abraham/reflection)
+
+**Example with reflect-metadata:**
+
+```js
+import "reflect-metadata";
+import * as x509 from "@peculiar/x509";
+// ...
+```
+
+If you see the error **"tsyringe requires a reflect polyfill. Please add 'import "reflect-metadata"' to the top of your entry point."** — install one of the polyfills above and add the import before any `@peculiar/x509` imports.
+
 ## Installation
@@ -35,0 +54,0 @@

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Dependency count

10

-9.09%

Number of lines in readme file

240

8.6%

Number of medium supply chain risk alerts

0

-100%

Worsened metrics

Total package byte prevSize

539791

-2.05%

Dev dependency count

17

6.25%

Lines of code

9221

-0.63%

Dependency changes

• - Removed

  reflect-metadata@^0.2.2

• - Removed

  reflect-metadata@0.2.2
  (transitive)