@relaycorp/relaynet-core - npm Package Compare versions

Comparing version 1.4.5 to 1.4.6

build/main/lib/crypto_wrappers/cms/envelopedData.js

@@ -142,4 +142,3 @@ "use strict";
     async decrypt(dhPrivateKey) {
-        const recipientCertificate = this.pkijsEnvelopedData.recipientInfos[0].value
-            .recipientCertificate;
+        const originator = this.pkijsEnvelopedData.recipientInfos[0].value.originator;
         const dhCertificate = {
@@ -149,3 +148,3 @@ subjectPublicKeyInfo: {
                 algorithm: {
-                    algorithmParams: recipientCertificate.subjectPublicKeyInfo.algorithm.algorithmParams,
+                    algorithmParams: originator.value.algorithm.algorithmParams,
                 },
@@ -152,0 +151,0 @@ },

build/module/lib/crypto_wrappers/cms/envelopedData.js

@@ -128,4 +128,3 @@ // tslint:disable:no-object-mutation max-classes-per-file
     async decrypt(dhPrivateKey) {
-        const recipientCertificate = this.pkijsEnvelopedData.recipientInfos[0].value
-            .recipientCertificate;
+        const originator = this.pkijsEnvelopedData.recipientInfos[0].value.originator;
         const dhCertificate = {
@@ -135,3 +134,3 @@ subjectPublicKeyInfo: {
                 algorithm: {
-                    algorithmParams: recipientCertificate.subjectPublicKeyInfo.algorithm.algorithmParams,
+                    algorithmParams: originator.value.algorithm.algorithmParams,
                 },
@@ -138,0 +137,0 @@ },

package.json

 {
   "name": "@relaycorp/relaynet-core",
-  "version": "1.4.5",
+  "version": "1.4.6",
   "author": {
@@ -48,3 +48,3 @@ "email": "[e-mail]",
     "node-webcrypto-ossl": "^1.0.47",
-    "pkijs": "^2.1.83",
+    "pkijs": "git://github.com/gnarea/PKI.js.git#built258fix",
     "smart-buffer": "^4.0.2",
@@ -51,0 +51,0 @@ "uuid4": "^1.1.4",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

190818

decreased by-0.05%

Lines of code

2705

decreased by-0.07%

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedasn1js@3.0.5(transitive)

• - Removedbytestreamjs@1.1.3(transitive)

• - Removedpkijs@2.4.0(transitive)

• - Removedpvtsutils@1.3.6(transitive)

• - Removedtslib@2.8.1(transitive)

• Updatedpkijs@git://github.com/gnarea/PKI.js.git#built258fix