node-apex-api-security - npm Package Compare versions

Comparing version 1.0.10 to 1.0.11

CHANGELOG.md

@@ -7,5 +7,10 @@ # Change Log
 
+### V1.0.11
+
+- Patch and update Lodash
+
 ### V1.0.10
-- Fix vulnerable dependency and update mocha configs 
 
+- Fix vulnerable dependency and update mocha configs
+
 ### V1.0.9
@@ -12,0 +17,0 @@

package.json

 {
   "name": "node-apex-api-security",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "description": "APEX API security utiity. Includes helper operations to generate HMAC-SHA256 and RSA-SHA256 signatures",
@@ -13,3 +13,3 @@ "main": "index.js",
   "dependencies": {
-    "lodash": "^4.17.15",
+    "lodash": "^4.17.19",
     "minimist": "^1.2.5",
@@ -16,0 +16,0 @@ "querystring": "^0.2.0",

README.md

 # APEX API Node.js Security Utility
 [![npm version](https://badge.fury.io/js/node-apex-api-security.svg)](https://badge.fury.io/js/node-apex-api-security)
 [![Codacy Badge](https://api.codacy.com/project/badge/Grade/eb0547096e2d4693b8cd19a87977f14f)](https://www.codacy.com/app/GovTech/node-apex-api-security?utm_source=github.com&utm_medium=referral&utm_content=GovTechSG/node-apex-api-security&utm_campaign=Badge_Grade)
-[![Build Status](https://travis-ci.org/GovTechSG/node-apex-api-security.svg?branch=master)](https://travis-ci.org/GovTechSG/node-apex-api-security)
+[![Build Status](https://travis-ci.com/GovTechSG/node-apex-api-security.svg?branch=master)](https://travis-ci.com/GovTechSG/node-apex-api-security)
 [![Coverage Status](https://coveralls.io/repos/github/GovTechSG/node-apex-api-security/badge.svg?branch=master)](https://coveralls.io/github/GovTechSG/node-apex-api-security?branch=master)
@@ -6,0 +6,0 @@ [![Known Vulnerabilities](https://snyk.io/test/github/govtechsg/node-apex-api-security/badge.svg)](https://snyk.io/test/github/govtechsg/node-apex-api-security)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

32642

decreased by-15.76%

Number of package files

12

decreased by-7.69%

Dependency changes

• Updatedlodash@^4.17.19