backside-userpass-auth - npm Package Compare versions

Comparing version 0.0.0 to 0.0.2

lib/UserPassAuth.js

@@ -18,3 +18,3 @@ var bcrypt = require("bcrypt")
   this.expire = opts.expire || 1440
-  this.secret = opts.secret || (function() {
+  this.secret = opts.secret || process.env.RULE_TREE_SECRET || (function() {
     self.logger.log("warn", "using default encyption secret! don't do this in prod!")
@@ -66,3 +66,5 @@ return "really bad default token, please don't user this in prod"
 UserPassAuth.prototype.getUser = function(username, cb) {
+  console.log("trying to get user", username)
   this.persistence.privateGet(this.userKey + username, function(err, userObj) {
+    console.log("got", treeUtils.collapseTree(userObj))
     cb(null, treeUtils.collapseTree(userObj))
@@ -69,0 +71,0 @@ })

package.json

 {
   "name": "backside-userpass-auth",
-  "version": "0.0.0",
+  "version": "0.0.2",
   "description": "User/Password auth module for backside, with tokens",
@@ -23,3 +23,3 @@ "main": "index.js",
   "dependencies": {
-    "backside-utils": "0.0.0",
+    "backside-utils": "0.0.*",
     "jsonwebtoken": "~0.4.0",
@@ -29,4 +29,5 @@ "bcrypt": "~0.7.8"
   "devDependencies": {
-    "chai": "~1.9.1"
+    "chai": "~1.9.1",
+    "mocha": "~1.20.1"
   }
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

10410

increased by9.49%

Number of package files

7

increased by16.67%

Lines of code

243

increased by0.83%

Number of medium quality alerts

1

decreased by-50%

Number of lines in readme file

23

increased byInfinity%

Worsened metrics

Dev dependency count

2

increased by100%

Number of low supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedbackside-utils@0.0.4(transitive)

• - Removedbackside-utils@0.0.0(transitive)

• Updatedbackside-utils@0.0.*