@sigstore/core - npm Package Compare versions

Comparing version 3.1.0 to 3.2.0

dist/crypto.js

@@ -28,3 +28,12 @@ "use strict";
     if (typeof key === 'string') {
-        return crypto_1.default.createPublicKey(key);
+        if (key.startsWith('-----')) {
+            return crypto_1.default.createPublicKey(key);
+        }
+        else {
+            return crypto_1.default.createPublicKey({
+                key: Buffer.from(key, 'base64'),
+                format: 'der',
+                type: type,
+            });
+        }
     }
@@ -31,0 +40,0 @@ else {

package.json

 {
   "name": "@sigstore/core",
-  "version": "3.1.0",
+  "version": "3.2.0",
   "description": "Base library for Sigstore",
@@ -5,0 +5,0 @@ "main": "dist/index.js",

New alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

90157

0.28%

Lines of code

1997

0.45%

No dependency changes