@web3-storage/access - npm Package Compare versions

Comparing version 20.0.0 to 20.0.1

dist/src/crypto/aes-key.js

@@ -1,2 +0,2 @@
-import { webcrypto } from 'one-webcrypto';
+import { webcrypto } from '@storacha/one-webcrypto';
 import * as uint8arrays from 'uint8arrays';
@@ -3,0 +3,0 @@ import { randomIV } from './encoding.js';

dist/src/crypto/encoding.js

@@ -1,2 +0,2 @@
-import { webcrypto } from 'one-webcrypto';
+import { webcrypto } from '@storacha/one-webcrypto';
 import * as uint8arrays from 'uint8arrays';
@@ -3,0 +3,0 @@ import * as bigintModArith from 'bigint-mod-arith';

dist/src/crypto/p256-ecdh.js

@@ -1,2 +0,2 @@
-import { webcrypto } from 'one-webcrypto';
+import { webcrypto } from '@storacha/one-webcrypto';
 import * as uint8arrays from 'uint8arrays';
@@ -3,0 +3,0 @@ import * as DID from '@ipld/dag-ucan/did';

package.json

 {
   "name": "@web3-storage/access",
-  "version": "20.0.0",
+  "version": "20.0.1",
   "description": "w3access client",
@@ -91,2 +91,4 @@ "homepage": "https://web3.storage",
     "@ipld/dag-ucan": "^3.4.0",
+    "@scure/bip39": "^1.2.1",
+    "@storacha/one-webcrypto": "^1.0.1",
     "@ucanto/client": "^9.0.1",
@@ -101,8 +103,6 @@ "@ucanto/core": "^10.0.1",
     "multiformats": "^12.1.2",
-    "one-webcrypto": "https://github.com/web3-storage/one-webcrypto",
     "p-defer": "^4.0.0",
     "type-fest": "^4.9.0",
     "uint8arrays": "^4.0.6",
-    "@scure/bip39": "^1.2.1",
-    "@web3-storage/capabilities": "^17.1.1",
+    "@web3-storage/capabilities": "^17.2.0",
     "@web3-storage/did-mailto": "^2.1.0"
@@ -109,0 +109,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

231003

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Added@storacha/one-webcrypto@^1.0.1

• + Added@storacha/one-webcrypto@1.0.1(transitive)

• - Removedone-webcrypto@https://github.com/web3-storage/one-webcrypto

• Updated@web3-storage/capabilities@^17.2.0