Comparing version 0.0.3 to 1.0.0
@@ -9,3 +9,3 @@ // @flow | ||
const wordlist = require('./wordlist') | ||
const crypto = require('crypto') | ||
const randomBytes = require('randombytes'); | ||
@@ -94,3 +94,3 @@ const MAX_PASSPHRASE_SIZE = 1024 // Max size of passphrase in bytes | ||
} | ||
const bytes = crypto.randomBytes(size) | ||
const bytes = randomBytes(size) | ||
return niceware.bytesToPassphrase(bytes) | ||
@@ -97,0 +97,0 @@ } |
{ | ||
"name": "niceware", | ||
"version": "0.0.3", | ||
"version": "1.0.0", | ||
"description": "Utility for converting cryptographic keys into human-readable phrases", | ||
@@ -47,4 +47,5 @@ "keywords": [ | ||
"dependencies": { | ||
"binary-search": "^1.3.2" | ||
"binary-search": "^1.3.2", | ||
"randombytes": "^2.0.3" | ||
} | ||
} |
Sorry, the diff of this file is too big to display
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
12
0
1690670
2
133283
3
+ Addedrandombytes@^2.0.3
+ Addedrandombytes@2.1.0(transitive)
+ Addedsafe-buffer@5.2.1(transitive)