http-signature - npm Package Compare versions

Comparing version 1.3.6 to 1.4.0

lib/utils.js

@@ -16,3 +16,4 @@ // Copyright 2012 Joyent, Inc.  All rights reserved.
   'dsa': true,
-  'ecdsa': true
+  'ecdsa': true,
+  'ed25519': true
 };
@@ -19,0 +20,0 @@

package.json

 {
   "name": "http-signature",
   "description": "Reference implementation of Joyent's HTTP Signature scheme.",
-  "version": "1.3.6",
+  "version": "1.4.0",
   "license": "MIT",
-  "author": "Joyent, Inc",
+  "author": "MNX Cloud (mnx.io)",
   "contributors": [
@@ -14,6 +14,6 @@ "Mark Cavage <[e-mail]>",
     "type": "git",
-    "url": "git://github.com/joyent/node-http-signature.git"
+    "url": "git://github.com/TritonDataCenter/node-http-signature.git"
   },
-  "homepage": "https://github.com/joyent/node-http-signature/",
-  "bugs": "https://github.com/joyent/node-http-signature/issues",
+  "homepage": "https://github.com/TritonDataCenter/node-http-signature/",
+  "bugs": "https://github.com/TritonDataCenter/node-http-signature/issues",
   "keywords": [
@@ -36,3 +36,3 @@ "https",
     "jsprim": "^2.0.2",
-    "sshpk": "^1.14.1"
+    "sshpk": "^1.18.0"
   },
@@ -39,0 +39,0 @@ "devDependencies": {

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Lines of code

930

increased by0.11%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

38551

decreased by-5.38%

Number of package files

8

decreased by-11.11%

Dependency changes

• Updatedsshpk@^1.18.0