jsonwebtoken - npm Package Compare versions

Comparing version 7.4.0 to 7.4.1

CHANGELOG.md

@@ -7,2 +7,11 @@ # Change Log
 
+## 7.4.1 - 2017-05-17
+
+ - bump ms to v2 due a ReDoS vulnerability (#352) ([adcfd6ae4088c838769d169f8cd9154265aa13e0](https://github.com/auth0/node-jsonwebtoken/commit/adcfd6ae4088c838769d169f8cd9154265aa13e0))
+
+## 7.4.0 - 2017-04-24
+
+ - Add docs about numeric date fields ([659f73119900a4d837650d9b3f5af4e64a2f843b](https://github.com/auth0/node-jsonwebtoken/commit/659f73119900a4d837650d9b3f5af4e64a2f843b))
+ - Make Options object optional for callback-ish sign ([e202c4fd00c35a24e9ab606eab89186ade13d0cc](https://github.com/auth0/node-jsonwebtoken/commit/e202c4fd00c35a24e9ab606eab89186ade13d0cc))
+
 ## 7.3.0 - 2017-02-13
@@ -9,0 +18,0 @@

package.json

 {
   "name": "jsonwebtoken",
-  "version": "7.4.0",
+  "version": "7.4.1",
   "description": "JSON Web Token implementation (symmetric and asymmetric)",
@@ -25,3 +25,3 @@ "main": "index.js",
     "lodash.once": "^4.0.0",
-    "ms": "^0.7.1",
+    "ms": "^2.0.0",
     "xtend": "^4.0.1"
@@ -28,0 +28,0 @@ },

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1168046

increased by189.54%

Number of package files

157

increased by96.25%

Lines of code

24670

increased by544.97%

Worsened metrics

Number of low supply chain risk alerts

66

increased by725%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedms@2.1.3(transitive)

• - Removedms@0.7.3(transitive)

• Updatedms@^2.0.0