asset-pipe-common - npm Package Compare versions

Comparing version 1.0.0-alpha.4 to 1.0.0-beta.1

lib/common.js

@@ -21,3 +21,3 @@ 'use strict';
         });
-        this._hasher = crypto.createHash('sha1');
+        this._hasher = crypto.createHash('sha256');
     }
@@ -51,3 +51,3 @@
         });
-        this._hasher = crypto.createHash('sha1');
+        this._hasher = crypto.createHash('sha256');
     }
@@ -77,3 +77,3 @@
 module.exports.hasher = (source) => {
-    const hasher = crypto.createHash('sha1');
+    const hasher = crypto.createHash('sha256');
     return hasher.update(source, Buffer.isBuffer(source) ? null : 'utf8').digest('hex');
@@ -80,0 +80,0 @@ };

package.json

 {
   "name": "asset-pipe-common",
-  "version": "1.0.0-alpha.4",
+  "version": "1.0.0-beta.1",
   "author": {
@@ -28,9 +28,9 @@ "name": "Trygve Lie",
   "dependencies": {
-    "readable-stream": "2.2.2"
+    "readable-stream": "2.2.6"
   },
   "devDependencies": {
-    "JSONStream": "1.2.1",
+    "JSONStream": "1.3.1",
     "eslint": "^3.15.0",
     "eslint-config-finn": "^1.0.1",
-    "tap": "10.0.2"
+    "tap": "10.3.0"
   },
@@ -37,0 +37,0 @@ "scripts": {

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2834

increased by0.18%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedreadable-stream@2.2.6(transitive)

• - Removedreadable-stream@2.2.2(transitive)

• Updatedreadable-stream@2.2.6