New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

multifeed

Package Overview
Dependencies
Maintainers
2
Versions
70
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

multifeed - npm Package Compare versions

Comparing version 4.1.4 to 4.1.5

2

index.js

@@ -23,2 +23,4 @@ var raf = require('random-access-file')

opts = opts || {}
// Support legacy opts.key

@@ -25,0 +27,0 @@ if (opts.key) opts.encryptionKey = opts.key

2

package.json

@@ -5,3 +5,3 @@ {

"author": "Stephen Whitmore <sww@eight.net>",
"version": "4.1.4",
"version": "4.1.5",
"repository": {

@@ -8,0 +8,0 @@ "url": "git://github.com/noffle/multifeed.git"

@@ -128,16 +128,2 @@ # multifeed

## Hacks
1. `hypercore-protocol` requires the first feed exchanged to be common between
replicating peers. This prevents two strangers from exchanging sets of
hypercores. A "fake" hypercore with a hardcoded public key is included in the
code to bootstrap the replication process. I discarded the private key, but
even if I didn't, it doesn't let me do anything nefarious. You could patch
this with your own key of choice.
2. `hypercore-protocol` requires all feed keys be known upfront: only discovery
keys are exchanged (`discoveryKey = hash(key)`), so this module wraps the
hypercore replication duplex stream in a secondary duplex stream that
exchanges feed public keys upfront before moving on to the hypercore
replication mechanism.
## See Also

@@ -144,0 +130,0 @@

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc