bitcoinjs-lib - npm Package Compare versions

Comparing version 6.0.1 to 6.0.2

CHANGELOG.md

@@ -0,1 +1,9 @@
+# 6.0.2
+__fixed__
+- p2sh payment now uses empty Buffer for redeem.output when redeemScript is OP_FALSE (#1802)
+- Fix ripemd160 hashing fallback issue (#1812)
+
+# 6.0.1
+- No changes to public API
+
 # 6.0.0
@@ -2,0 +10,0 @@ __removed__

package.json

 {
   "name": "bitcoinjs-lib",
-  "version": "6.0.1",
+  "version": "6.0.2",
   "description": "Client-side Bitcoin JavaScript library",
@@ -18,3 +18,3 @@ "main": "./src/index.js",
   "scripts": {
-    "audit": "NPM_AUDIT_IGNORE_DEV=1 NPM_AUDIT_IGNORE_LEVEL=low npm-audit-whitelister .npm-audit-whitelister.json",
+    "audit": "better-npm-audit audit -l high",
     "build": "npm run clean && tsc -p ./tsconfig.json && npm run formatjs",
@@ -57,2 +57,3 @@ "build:tests": "npm run clean:jstests && tsc -p ./test/tsconfig.json",
     "create-hash": "^1.1.0",
+    "ripemd160": "^2.0.2",
     "typeforce": "^1.11.3",
@@ -70,3 +71,5 @@ "varuint-bitcoin": "^1.1.2",
     "@types/randombytes": "^2.0.0",
+    "@types/ripemd160": "^2.0.0",
     "@types/wif": "^2.0.2",
+    "better-npm-audit": "^3.7.3",
     "bip32": "^3.0.1",
@@ -79,7 +82,6 @@ "bip39": "^3.0.2",
     "dhttp": "^3.0.0",
-    "ecpair": "^1.0.0",
+    "ecpair": "^2.0.1",
     "hoodwink": "^2.0.0",
     "minimaldata": "^1.0.2",
-    "mocha": "^7.1.1",
-    "npm-audit-whitelister": "^1.0.2",
+    "mocha": "^10.0.0",
     "nyc": "^15.1.0",
@@ -91,3 +93,3 @@ "prettier": "1.16.4",
     "rimraf": "^2.6.3",
-    "tiny-secp256k1": "^2.1.1",
+    "tiny-secp256k1": "^2.1.2",
     "ts-node": "^8.3.0",
@@ -94,0 +96,0 @@ "tslint": "^6.1.3",

src/crypto.js

@@ -5,2 +5,3 @@ 'use strict';
 const createHash = require('create-hash');
+const RipeMd160 = require('ripemd160');
 function ripemd160(buffer) {
@@ -12,5 +13,9 @@ try {
   } catch (err) {
-    return createHash('ripemd160')
-      .update(buffer)
-      .digest();
+    try {
+      return createHash('ripemd160')
+        .update(buffer)
+        .digest();
+    } catch (err2) {
+      return new RipeMd160().update(buffer).digest();
+    }
   }
@@ -17,0 +22,0 @@ }

src/payments/p2sh.js

@@ -61,5 +61,6 @@ 'use strict';
     const chunks = _chunks();
+    const lastChunk = chunks[chunks.length - 1];
     return {
       network,
-      output: chunks[chunks.length - 1],
+      output: lastChunk === OPS.OP_FALSE ? Buffer.from([]) : lastChunk,
       input: bscript.compile(chunks.slice(0, -1)),
@@ -66,0 +67,0 @@ witness: a.witness || [],

New alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

197397

0.2%

Lines of code

4842

0.12%

Worsened metrics

Dependency count

8

14.29%

Dev dependency count

31

3.33%

Dependency changes

• + Added

  ripemd160@^2.0.2