five-bells-shared - npm Package Compare versions

Comparing version 24.0.0 to 25.0.0

package.json

 {
   "name": "five-bells-shared",
-  "version": "24.0.0",
+  "version": "25.0.0",
   "description": "Shared components for Five Bells projects.",
@@ -5,0 +5,0 @@ "keywords": [

schemas/Message.json

@@ -9,2 +9,6 @@ {
       "properties": {
+        "id": {
+          "description": "Resource identifier",
+          "$ref": "Uuid.json"
+        },
         "ledger": {
@@ -14,2 +18,33 @@ "description": "The ledger where the message is to be delivered",
         },
+        "from": {
+          "description": "The message sender",
+          "$ref": "Iri.json"
+        },
+        "to": {
+          "description": "The message recipient",
+          "$ref": "Iri.json"
+        },
+        "account": {
+          "description": "(deprecated)",
+          "$ref": "Iri.json"
+        },
+        "ilp": {
+          "description": "The message payload",
+          "$ref": "Base64.json"
+        },
+        "custom": {
+          "description": "The message payload",
+          "type": "object"
+        }
+      },
+      "required": ["id", "ledger", "from", "to"],
+      "additionalProperties": false
+    },
+    {
+      "description": "(deprecated; use from/to & ilp/custom)",
+      "properties": {
+        "ledger": {
+          "description": "The ledger where the message is to be delivered",
+          "$ref": "Iri.json"
+        },
         "data": {
@@ -36,3 +71,3 @@ "description": "The message payload",
     {
-      "description": "(deprecated; use from/to)",
+      "description": "(deprecated; use from/to & ilp/custom)",
       "properties": {
@@ -39,0 +74,0 @@ "ledger": {

schemas/Routes.json

@@ -25,3 +25,3 @@ {
       "points": {
-        "$ref": "LiquidityCurve.json",
+        "$ref": "Base64.json",
         "description": "a list of points describing the exchange rate curve"
@@ -28,0 +28,0 @@ },

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 19 instances in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Number of low supply chain risk alerts

86

decreased by-38.57%

Number of medium supply chain risk alerts

2

decreased by-77.78%

Worsened metrics

Total package byte prevSize

2007827

decreased by-73.81%

Number of package files

160

decreased by-71.98%

Lines of code

5444

decreased by-78.71%

No dependency changes