ethrpc - npm Package Compare versions

Comparing version 4.0.8 to 4.0.9

package.json

 {
   "name": "ethrpc",
-  "version": "4.0.8",
+  "version": "4.0.9",
   "description": "Ethereum JSON RPC",
@@ -31,3 +31,3 @@ "author": "The Augur Developers <[e-mail]>",
     "ethereumjs-blockstream": "2.0.4",
-    "ethereumjs-tx": "http://github.com/tinybike/ethereumjs-tx",
+    "ethereumjs-tx": "1.3.1",
     "immutable-delete": "1.0.1",
@@ -34,0 +34,0 @@ "keccak": "1.2.0",

src/wrappers/set-coinbase.js

@@ -5,3 +5,2 @@ "use strict";
 var eth_coinbase = require("./eth").coinbase;
-var isHex = require("../utils/is-hex");
 
@@ -8,0 +7,0 @@ function setCoinbase() {

Fixed alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

178239

decreased by-0.04%

Lines of code

4031

decreased by-0.02%

Dependency changes

• + Addedethereum-common@0.0.18(transitive)

• + Addedethereumjs-tx@1.3.1(transitive)

• + Addedethereumjs-util@5.2.1(transitive)

• + Addedethjs-util@0.1.6(transitive)

• + Addedis-hex-prefixed@1.0.0(transitive)

• + Addedstrip-hex-prefix@1.0.0(transitive)

• Updatedethereumjs-tx@1.3.1