crx - npm Package Compare versions

Comparing version 1.0.0 to 1.1.0

bin/crx.js

@@ -53,3 +53,3 @@ #!/usr/bin/env node
 
-    fs.writeFile(keyPath, key.getPrivatePEM(), function(err){
+    fs.writeFile(keyPath, key.exportKey('pkcs1-private-pem'), function(err){
       if (err){
@@ -56,0 +56,0 @@ throw err;

package.json

@@ -5,3 +5,3 @@ {
   "description": "Build Google Chrome extensions with node.js",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "homepage": "https://github.com/oncletom/crx",
@@ -27,3 +27,3 @@ "bin": {
     "es6-promise": "^2.0.0",
-    "node-rsa": "^0.1.54",
+    "node-rsa": "^0.2.10",
     "rimraf": "^2.2.8",
@@ -30,0 +30,0 @@ "wrench": "^1.5.0"

README.md

 # crx [![Build Status](https://secure.travis-ci.org/oncletom/crx.svg)](http://travis-ci.org/oncletom/crx)
 
-crx is a [node.js](http://nodejs.org/) command line app for packing Google Chrome extensions. If you'd like to integrate it into your [grunt](http://gruntjs.com/) workflow, give [grunt-crx](https://github.com/oncletom/grunt-crx) a spin.
+crx is a [pure node.js](http://nodejs.org/) command line app for packing Google Chrome extensions. **No OpenSSL required**!
 
-## Requirements
+If you'd like to integrate it into your [grunt](http://gruntjs.com/) workflow, give [grunt-crx](https://github.com/oncletom/grunt-crx) a spin.
 
-* [node.js](http://nodejs.org/), tested with >= 0.7.12
-* openssl
+Massive hat tip to the [node-rsa project](https://github.com/rzcoder/node-rsa)!
 
@@ -56,3 +55,2 @@ ## Install
 });
-
 ```
@@ -95,3 +93,3 @@
     })
-  })
+  });
 ```
@@ -98,0 +96,0 @@

src/crx.js

@@ -7,3 +7,3 @@ 'use strict';
 var crypto = require("crypto");
-var spawn = require("child_process").spawn;
+var RSA = require('node-rsa');
 var wrench = require("wrench");
@@ -162,11 +162,5 @@ var archiver = require("archiver");
     return new Promise(function(resolve, reject){
-      var rsa = spawn("openssl", ["rsa", "-pubout", "-outform", "DER"]);
+      var key = new RSA(privateKey, 'pkcs1-private-pem');
 
-      rsa.stdout.on("data", function (publicKey) {
-        resolve(publicKey);
-      });
-
-      rsa.on('error', reject);
-
-      rsa.stdin.end(privateKey);
+      resolve(key.exportKey('pkcs8-public-der'));
     });
@@ -173,0 +167,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

86332

increased by276.08%

Number of package files

29

increased by163.64%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Lines of code

360

decreased by-1.1%

Number of lines in readme file

183

decreased by-1.08%

Dependency changes

• + Addedasn1@0.2.3(transitive)

• + Addedlodash@3.3.0(transitive)

• + Addednode-rsa@0.2.30(transitive)

• - Removedasn1@0.2.6(transitive)

• - Removednode-rsa@0.1.54(transitive)

• - Removedsafer-buffer@2.1.2(transitive)

• Updatednode-rsa@^0.2.10