jwcrypto - npm Package Compare versions

Comparing version 0.3.1 to 0.3.2

lib/jwcrypto.js

@@ -29,5 +29,5 @@ /* This Source Code Form is subject to the terms of the Mozilla Public
   // go through callbacks
-  POST_SEED_CALLBACKS.forEach(function(one_cb) {
-    one_cb();
-  });
+  for (var i = 0; i < POST_SEED_CALLBACKS.length; i++) {
+    POST_SEED_CALLBACKS[i]();
+  }
 
@@ -34,0 +34,0 @@ // clean up as null so that weird egregious errors will

package.json

 {
     "name": "jwcrypto"
-  , "version": "0.3.1"
+  , "version": "0.3.2"
   , "dependencies": {
@@ -5,0 +5,0 @@ "browserify": "1.8.1",

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

474473

increased by34.49%

Lines of code

10374

increased by74.53%

Number of medium supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Number of package files

62

decreased by-17.33%

Number of low supply chain risk alerts

15

increased by87.5%

No dependency changes