bn.js - npm Package Compare versions

Comparing version 0.1.4 to 0.1.5

lib/bn.js

@@ -619,4 +619,6 @@ var assert = require('assert');
     }
-    max.ishr(1, shift);
-    shift -= 1;
+    var delta = Math.max(1, maxLen - c.bitLength());
+    max.ishr(delta, shift);
+    maxLen -= delta;
+    shift -= delta;
   }
@@ -718,4 +720,4 @@ return { mod: c, div: r };
   var carry = q;
-  for (var i = s; carry != 0; i++) {
-    var w = i < this.length ? this.words[i] : 0;
+  for (var i = s; carry != 0 && i < this.length; i++) {
+    var w = this.words[i];
     w += carry;
@@ -726,2 +728,4 @@ carry = w >> 24;
   }
+  if (carry !== 0)
+    this.words[i] = carry;
   this.length = this.words.length;
@@ -728,0 +732,0 @@ return this;

package.json

 {
   "name": "bn.js",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Big number implementation in pure javascript",
@@ -5,0 +5,0 @@ "main": "lib/bn.js",

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

29790

0.42%

Lines of code

956

0.42%

No dependency changes