lti - npm Package Compare versions

Comparing version 0.3.5 to 0.3.6

.travis.yml

@@ -6,1 +6,9 @@ language: node_js
   - "grunt travis"
+env:
+  global:
+    - secure: "ALGM5ytr4iQZOt0JduSVa+C/vpdOWVwRSaU6Uxwn3GIKnpUhxyRdCb7ELSUmI/i8RQMcnAR4sAlKedy9T4WXwjX6sEKnn6OY0bmqBulc1y21yu4S7EvHgu5h+4YpneXeQVVbzEn4TYPiZXI/wJgTPlW460XyZJrXyBa0OJy0C/4="
+    - secure: "dmDllBuZ3xE0Wg0q+2QvcXCCaCakF1hHofaRb4EtEAmFDXf4KIBTYCuG1wO9HFm1Kh9lMdZZdB2Huk4bQOGar+KQQH+N8UyS61HlDFN1RjcJBTyUOaXo8t8h1nLvZNWwyWt6W/XxraPeUDYigigmAsC/ligxpVLrRsv6xR9rH44="
+    - secure: "orvTJ3Q12AZ2k+aI2qYHmmfakzdG7wn7zS8109P/xczjEw44uUZe1/WMC327Wp7qYZqjDIZLYV/ViP1azm5PtwScPn8R54kx/Zv04HUstVGECprSCunYUdlRuAXirzYEC8n2gzIZEZOUB7ptyvIEkUB65qxX/qiq920ndY3hBYw="
+    - secure: "HKzi6EBpXPYAKLz9qoIQLZrrSnpk0TTE2abzLYKy3yciIWVGNNBLT/9/+Nb94ITsax6sihpafPmKfZpeRzNLinhncnR/KZxQJ4htNKrpJzsJPVVuLy7M+To5ysEQ+yTGs0RsKf9efsI68X2C+jTvrUHJeX4IAPp7eeJKR15D5dc="
+    - secure: "JtThIHmoWb4S2107+67ZV5Dzo/5qyDNmWy4nJFOD+39McBVKdxBmlg2TllrSjbUFb/taRr6e/maDRXyIyj/14F0FAT1wqqKeoKpoxGafu+IRQkfBVHWhjjXc2DgjLoMfBt5CyLHbX3u8nl6kuklj++C53OAN9LvLZexJK8b1eMQ="
+    - secure: "N1Xf9bqZWbSqLP7co2jCppuWq2mzHWDsJ5eU4KA7KFpTL2IJpOkjsCxNtwSf882BJ9C4ALqvRRd4G8jOXC0dmMsZde9kY/5sUmT2mmEEUKljgxYjs3wbconwsC0+Bs2RM7Osd12+XusnNWMMNP9VT5IgoZn/yEY7xKZ/ya1Z7co="

build/lib/toolconsumer-test.js

 (function() {
-  var config, oauth, should, toolconsumer;
+  var oauth, should, toolconsumer;
 
-  config = require('../etc/toolconsumer-test.config');
-
   should = require('should');
@@ -17,3 +15,3 @@
         params = require('./toolparameters').property('resource_link_id', '0');
-        context = require('./toolcontext').property('consumerKey', config.consumerKey).property('consumerSecret', config.consumerSecret).property('host', config.host).property('path', config.path).property('port', config.port);
+        context = require('./toolcontext').property('consumerKey', process.env.LTIJS_CONSUMERKEY).property('consumerSecret', process.env.LTIJS_CONSUMERSECRET).property('host', process.env.LTIJS_HOST).property('path', process.env.LTIJS_PATH).property('port', process.env.LTIJS_PORT);
         return (toolconsumer.property('toolcontext', context)).request(params).then(function(response) {
@@ -27,3 +25,3 @@ response.isSome.should.be["true"];
         var context;
-        context = require('./toolcontext').property('consumerKey', config.consumerKey).property('consumerSecret', config.consumerSecret).property('host', config.host).property('path', config.path).property('port', config.port);
+        context = require('./toolcontext').property('consumerKey', process.env.LTIJS_CONSUMERKEY).property('consumerSecret', process.env.LTIJS_CONSUMERSECRET).property('host', process.env.LTIJS_HOST).property('path', process.env.LTIJS_PATH).property('port', process.env.LTIJS_PORT);
         return (toolconsumer.property('toolcontext', context)).request({
@@ -30,0 +28,0 @@ lti_version: 'LTI-1p0',

package.json

@@ -22,3 +22,3 @@ {
 	"homepage": "http://rockymadden.com/lti.js/",
-	"keywords": ["lti", "oauth", "learning tools interoperability", "ims", "ims global", "education"],
+	"keywords": ["lti", "oauth", "learning tools interoperability", "ims", "ims global", "education", "edtech"],
 	"main": "build/lti.js",
@@ -31,6 +31,6 @@ "name": "lti",
 	"scripts": {
-		"blanket": {"pattern": ["build"]},
+		"blanket": {"pattern": ["build/lib"]},
 		"prepublish": "grunt"
 	},
-	"version": "0.3.5"
+	"version": "0.3.6"
 }

source/test/coffeescript/lib/toolconsumer-test.coffee

@@ -1,2 +0,1 @@
-config = require('../etc/toolconsumer-test.config')
 should = require('should')
@@ -11,7 +10,7 @@ oauth = require('./oauth')
 			context = require('./toolcontext')
-				.property('consumerKey', config.consumerKey)
-				.property('consumerSecret', config.consumerSecret)
-				.property('host', config.host)
-				.property('path', config.path)
-				.property('port', config.port)
+				.property('consumerKey', process.env.LTIJS_CONSUMERKEY)
+				.property('consumerSecret', process.env.LTIJS_CONSUMERSECRET)
+				.property('host', process.env.LTIJS_HOST)
+				.property('path', process.env.LTIJS_PATH)
+				.property('port', process.env.LTIJS_PORT)
 
@@ -26,7 +25,7 @@ (toolconsumer.property('toolcontext', context)).request(params).then((response) ->
 			context = require('./toolcontext')
-				.property('consumerKey', config.consumerKey)
-				.property('consumerSecret', config.consumerSecret)
-				.property('host', config.host)
-				.property('path', config.path)
-				.property('port', config.port)
+				.property('consumerKey', process.env.LTIJS_CONSUMERKEY)
+				.property('consumerSecret', process.env.LTIJS_CONSUMERSECRET)
+				.property('host', process.env.LTIJS_HOST)
+				.property('path', process.env.LTIJS_PATH)
+				.property('port', process.env.LTIJS_PORT)
 
@@ -33,0 +32,0 @@ (toolconsumer.property('toolcontext', context))

build/etc/toolconsumer-test.config.json

-{
-	"consumerKey": "key",
-	"consumerSecret": "secret",
-	"utcOffset": 0,
-	"host": "www.imsglobal.org",
-	"path": "/developers/LTI/test/v1p1/tool.php",
-	"port": 80
-}

resource/test/json/etc/toolconsumer-test.config.json

-{
-	"consumerKey": "key",
-	"consumerSecret": "secret",
-	"utcOffset": 0,
-	"host": "www.imsglobal.org",
-	"path": "/developers/LTI/test/v1p1/tool.php",
-	"port": 80
-}

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Improved metrics

Total package byte prevSize

43346

2.22%

Worsened metrics

Number of package files

39

-4.88%

Lines of code

499

-2.92%

Number of low supply chain risk alerts

11

1000%

No dependency changes