@upandgo/verify-cognito-token - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

dist/index.js

@@ -32,2 +32,3 @@ "use strict";
 const jwk_to_pem_1 = __importDefault(require("jwk-to-pem"));
+const node_fetch_1 = __importDefault(require("node-fetch"));
 class TokenVerificator {
@@ -40,3 +41,3 @@ constructor(cognitoConfig) {
             const url = `${cognitoIssuer}/.well-known/jwks.json`;
-            const result = await fetch(url);
+            const result = await (0, node_fetch_1.default)(url);
             const publicKeys = await result.json();
@@ -43,0 +44,0 @@ this.cacheKeys = publicKeys.keys.reduce((agg, current) => {

package.json

 {
   "name": "@upandgo/verify-cognito-token",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "custom token verification for uag",
@@ -18,3 +18,4 @@ "repository": "[e-mail]:agence-upandgo/librairies/verify-cognito-token.git",
     "jsonwebtoken": "^8.5.1",
-    "jwk-to-pem": "^2.0.5"
+    "jwk-to-pem": "^2.0.5",
+    "node-fetch": "^3.2.10"
   },
@@ -21,0 +22,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

32495

increased by2.53%

Lines of code

123

increased by0.82%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

3

increased by50%

Dependency changes

• + Addednode-fetch@^3.2.10

• + Addeddata-uri-to-buffer@4.0.1(transitive)

• + Addedfetch-blob@3.2.0(transitive)

• + Addedformdata-polyfill@4.0.10(transitive)

• + Addednode-domexception@1.0.0(transitive)

• + Addednode-fetch@3.3.2(transitive)

• + Addedweb-streams-polyfill@3.3.3(transitive)