bitcoin-address-validation - npm Package Compare versions

Comparing version 0.2.3 to 0.2.4

lib/index.cjs.js

@@ -8,7 +8,7 @@ 'use strict';
 var hashSha256 = _interopDefault(require('hash.js/lib/hash/sha/256'));
-var bops = _interopDefault(require('bops'));
+var buffer = require('buffer');
 
 const base58 = baseX('123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz');
 
-const sha256 = payload => bops.from(hashSha256().update(payload).digest());
+const sha256 = payload => buffer.Buffer(hashSha256().update(payload).digest());
 
@@ -15,0 +15,0 @@ const addressTypes = {

lib/index.esm.js

 import baseX from 'base-x';
 import bech32 from 'bech32';
 import hashSha256 from 'hash.js/lib/hash/sha/256';
-import bops from 'bops';
+import { Buffer } from 'buffer';
 
 const base58 = baseX('123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz');
 
-const sha256 = payload => bops.from(hashSha256().update(payload).digest());
+const sha256 = payload => Buffer(hashSha256().update(payload).digest());
 
@@ -10,0 +10,0 @@ const addressTypes = {

package.json

 {
   "name": "bitcoin-address-validation",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Validate any Bitcoin address - Bech32, P2SH and P2PKH",
@@ -13,3 +13,3 @@ "homepage": "https://github.com/ruigomeseu/bitcoin-address-validation",
     "build": "rimraf lib && rollup -c",
-    "cover": "istanbul cover _mocha -- --require babel-core/register --require babel-polyfill --recursive",
+    "cover": "nyc mocha",
     "lint": "eslint src test"
@@ -40,3 +40,3 @@ },
     "cross-env": "^5.2.0",
-    "eslint": "^5.9.0",
+    "eslint": "^5.13.0",
     "eslint-config-airbnb": "^17.1.0",
@@ -48,13 +48,14 @@ "eslint-plugin-import": "^2.14.0",
     "mocha": "^5.0.0",
-    "rimraf": "^2.6.2",
-    "rollup": "^0.67.1",
+    "nyc": "^13.1.0",
+    "rimraf": "^2.6.3",
+    "rollup": "^1.1.2",
     "rollup-plugin-commonjs": "^9.2.0",
-    "rollup-plugin-node-resolve": "^3.0.0"
+    "rollup-plugin-node-builtins": "^2.1.2",
+    "rollup-plugin-node-resolve": "^4.0.0"
   },
   "dependencies": {
-    "base-x": "^3.0.4",
+    "base-x": "^3.0.5",
     "bech32": "^1.1.3",
-    "bops": "^1.0.0",
-    "hash.js": "^1.1.5"
+    "hash.js": "^1.1.7"
   }
 }

rollup.config.js

 import resolve from 'rollup-plugin-node-resolve';
 import commonjs from 'rollup-plugin-commonjs';
+import builtins from 'rollup-plugin-node-builtins';
 import pkg from './package.json';
@@ -15,3 +16,4 @@
       resolve(),
-      commonjs()
+      commonjs(),
+      builtins()
     ]
@@ -22,3 +24,8 @@ },
     input: 'src/index.js',
-    external: ['ms'],
+    external: [
+      'base-x',
+      'bech32',
+      'bops',
+      'hash.js/lib/hash/sha/256'
+    ],
     output: [
@@ -25,0 +32,0 @@ { file: pkg.main, format: 'cjs' },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

112927

increased by224.07%

Dependency count

3

decreased by-25%

Lines of code

3472

increased by221.78%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Dev dependency count

16

increased by14.29%

Dependency changes

• - Removedbops@^1.0.0

• - Removedbase64-js@1.0.2(transitive)

• - Removedbops@1.0.1(transitive)

• - Removedto-utf8@0.0.1(transitive)

• Updatedbase-x@^3.0.5

• Updatedhash.js@^1.1.7