ethjs-contract - npm Package Compare versions

Comparing version 0.1.4 to 0.1.5

CHANGELOG.md

@@ -0,1 +1,5 @@
+# 0.1.5 -- remove ethjs-sha3 for js-sha3
+
+1. Removed `ethjs-sha3` for `js-sha3`.
+
 # 0.1.4 -- fix object mutation
@@ -2,0 +6,0 @@

lib/index.js

 'use strict';
 
 var abi = require('ethjs-abi'); // eslint-disable-line
-var sha3 = require('ethjs-sha3'); // eslint-disable-line
+var keccak256 = require('js-sha3').keccak_256; // eslint-disable-line
 var EthFilter = require('ethjs-filter'); // eslint-disable-line
@@ -94,3 +94,3 @@ var getKeys = require('ethjs-util').getKeys; // eslint-disable-line
               var filterInputTypes = getKeys(methodObject.inputs, 'type', false);
-              var filterTopic = sha3(methodObject.name + '(' + filterInputTypes.join(',') + ')');
+              var filterTopic = '0x' + keccak256(methodObject.name + '(' + filterInputTypes.join(',') + ')');
               var argsObject = Object.assign({}, methodArgs[0]) || {};
@@ -97,0 +97,0 @@

package.json

 {
   "name": "ethjs-contract",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "A simple contract object for the Ethereum RPC.",
@@ -69,5 +69,5 @@ "main": "lib/index.js",
   "dependencies": {
-    "ethjs-abi": "0.1.4",
+    "ethjs-abi": "0.1.5",
     "ethjs-filter": "0.1.5",
-    "ethjs-sha3": "0.1.2",
+    "js-sha3": "0.5.5",
     "ethjs-util": "0.1.3"
@@ -74,0 +74,0 @@ },

src/index.js

 const abi = require('ethjs-abi'); // eslint-disable-line
-const sha3 = require('ethjs-sha3'); // eslint-disable-line
+const keccak256 = require('js-sha3').keccak_256; // eslint-disable-line
 const EthFilter = require('ethjs-filter'); // eslint-disable-line
@@ -91,3 +91,3 @@ const getKeys = require('ethjs-util').getKeys; // eslint-disable-line
               const filterInputTypes = getKeys(methodObject.inputs, 'type', false);
-              const filterTopic = sha3(`${methodObject.name}(${filterInputTypes.join(',')})`);
+              const filterTopic = `0x${keccak256(`${methodObject.name}(${filterInputTypes.join(',')})`)}`;
               const argsObject = Object.assign({}, methodArgs[0]) || {};
@@ -94,0 +94,0 @@

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

32

-21.95%

Worsened metrics

Total package byte prevSize

703916

-6.4%

Lines of code

8962

-7.23%

Dependency changes

• + Added

  js-sha3@0.5.5

• + Added

  ethjs-abi@0.1.5
  (transitive)

• + Added

  js-sha3@0.5.5
  (transitive)

• - Removed

  ethjs-sha3@0.1.2

• - Removed

  ethjs-abi@0.1.4
  (transitive)

• - Removed

  ethjs-sha3@0.1.2
  (transitive)

• - Removed

  hash.js@1.0.3
  (transitive)

• - Removed

  inherits@2.0.4
  (transitive)

• Updated

  ethjs-abi@0.1.5