Socket
Socket
Sign inDemoInstall

electron-store

Package Overview
Dependencies
Maintainers
1
Versions
27
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

electron-store - npm Package Compare versions

Comparing version 8.0.0 to 8.0.1

4

package.json
{
"name": "electron-store",
"version": "8.0.0",
"version": "8.0.1",
"description": "Simple data persistence for your Electron app or module - Save and load user preferences, app state, cache, etc",

@@ -37,3 +37,3 @@ "license": "MIT",

"dependencies": {
"conf": "^10.0.0",
"conf": "^10.0.3",
"type-fest": "^1.0.2"

@@ -40,0 +40,0 @@ },

@@ -27,2 +27,10 @@ # electron-store

</p>
<br>
<a href="https://keygen.sh">
<div>
<img src="https://sindresorhus.com/assets/thanks/keygen-logo.svg" width="210" alt="Keygen">
</div>
<b>A dead-simple software licensing and distribution API built for developers</b>
</a>
<br>
</div>

@@ -177,8 +185,6 @@

This can be used to secure sensitive data **if** the encryption key is stored in a secure manner (not plain-text) in the Node.js app. For example, by using [`node-keytar`](https://github.com/atom/node-keytar) to store the encryption key securely, or asking the encryption key from the user (a password) and then storing it in a variable.
Note that this is **not intended for security purposes**, since the encryption key would be easily found inside a plain-text Node.js app.
In addition to security, this could be used for obscurity. If a user looks through the config directory and finds the config file, since it's just a JSON file, they may be tempted to modify it. By providing an encryption key, the file will be obfuscated, which should hopefully deter any users from doing so.
Its main use is for obscurity. If a user looks through the config directory and finds the config file, since it's just a JSON file, they may be tempted to modify it. By providing an encryption key, the file will be obfuscated, which should hopefully deter any users from doing so.
It also has the added bonus of ensuring the config file's integrity. If the file is changed in any way, the decryption will not work, in which case the store will just reset back to its default state.
When specified, the store will be encrypted using the [`aes-256-cbc`](https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation) encryption algorithm.

@@ -421,2 +427,8 @@

#### Can I use it for large amounts of data?
This package is not a database. It simply uses a JSON file that is read/written on every change. Prefer using it for smaller amounts of data like user settings, value caching, state, etc.
If you need to store large blobs of data, I recommend saving it to disk and to use this package to store the path to the file instead.
## Related

@@ -423,0 +435,0 @@

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc