eosjs-ecc - npm Package Compare versions

Comparing version 4.0.7-ea61ee8.0 to 4.0.7

lib/aes.js

@@ -21,19 +21,18 @@ "use strict";
   decrypt: decrypt
-  /**
-      Spec: http://localhost:3002/steem/@dantheman/how-to-encrypt-a-memo-when-transferring-steem
-  
-      @throws {Error|TypeError} - "Invalid Key, ..."
-  
-      @arg {PrivateKey} private_key - required and used for decryption
-      @arg {PublicKey} public_key - required and used to calcualte the shared secret
-      @arg {string} [nonce = uniqueNonce()] - assigned a random unique uint64
-  
-      @return {object}
-      @property {string} nonce - random or unique uint64, provides entropy when re-using the same private/public keys.
-      @property {Buffer} message - Plain text message
-      @property {number} checksum - shared secret checksum
-  */
-
 };
+/**
+    Spec: http://localhost:3002/steem/@dantheman/how-to-encrypt-a-memo-when-transferring-steem
 
+    @throws {Error|TypeError} - "Invalid Key, ..."
+
+    @arg {PrivateKey} private_key - required and used for decryption
+    @arg {PublicKey} public_key - required and used to calcualte the shared secret
+    @arg {string} [nonce = uniqueNonce()] - assigned a random unique uint64
+
+    @return {object}
+    @property {string} nonce - random or unique uint64, provides entropy when re-using the same private/public keys.
+    @property {Buffer} message - Plain text message
+    @property {number} checksum - shared secret checksum
+*/
+
 function encrypt(private_key, public_key, message) {
@@ -40,0 +39,0 @@ var nonce = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : uniqueNonce();

lib/hash.js

@@ -41,3 +41,7 @@ "use strict";
 function ripemd160(data) {
-  return createHash('rmd160').update(data).digest();
+  try {
+    return createHash('rmd160').update(data).digest();
+  } catch (e) {
+    return createHash('ripemd160').update(data).digest();
+  }
 } // function hash160(buffer) {
@@ -44,0 +48,0 @@ //   return ripemd160(sha256(buffer))

package.json

 {
   "name": "eosjs-ecc",
-  "version": "4.0.7-ea61ee8.0",
+  "version": "4.0.7",
   "description": "Elliptic curve cryptography functions",
@@ -40,3 +40,3 @@ "keywords": [
   "dependencies": {
-    "@babel/runtime": "7.4.4",
+    "@babel/runtime": "7.6.0",
     "bigi": "1.4.2",
@@ -53,13 +53,13 @@ "browserify-aes": "1.0.6",
   "devDependencies": {
-    "@babel/cli": "7.4.4",
-    "@babel/core": "7.4.4",
-    "@babel/plugin-transform-runtime": "7.4.4",
-    "@babel/preset-env": "7.4.4",
-    "browserify": "16.2.3",
-    "coveralls": "3.0.3",
-    "documentation": "8.1.1",
-    "istanbul": "0.4.5",
-    "mocha": "5.2.0",
-    "nyc": "14.1.0",
-    "terser": "3.17.0"
+    "@babel/cli": "^7.6.0",
+    "@babel/core": "^7.6.0",
+    "@babel/plugin-transform-runtime": "^7.6.0",
+    "@babel/preset-env": "^7.6.0",
+    "browserify": "^16.2.3",
+    "coveralls": "^3.0.3",
+    "documentation": "^8.1.1",
+    "istanbul": "^0.4.5",
+    "mocha": "^5.2.0",
+    "nyc": "^14.1.0",
+    "terser": "^3.17.0"
   },
@@ -66,0 +66,0 @@ "nyc": {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1248672

0.2%

Lines of code

18680

0.2%

Number of low quality alerts

2

-33.33%

Number of medium supply chain risk alerts

0

-100%

Worsened metrics

Number of low supply chain risk alerts

67

1.52%

Dependency changes

• + Added

  @babel/runtime@7.6.0
  (transitive)

• - Removed

  @babel/runtime@7.4.4
  (transitive)

• Updated

  @babel/runtime@7.6.0