node-forge - npm Package Compare versions

Comparing version 1.3.2 to 1.3.3

lib/pkcs12.js

@@ -171,2 +171,3 @@ /**
           name: 'PFX.macData.mac.digestAlgorithm.parameters',
+          optional: true,
           tagClass: asn1.Class.UNIVERSAL,
@@ -173,0 +174,0 @@ captureAsn1: 'macAlgorithmParameters'

package.json

 {
   "name": "node-forge",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/digitalbazaar/forge",

flash/README.md

-Forge Flash Support
-===================
-
-SocketPool.swf
---------------
-
-Some special networking features can optionally use a Flash component.
-Building the output SWF file requires the [Flex SDK][].  A pre-built component
-is included: `swf/SocketPool.swf`.
-
-Building the output SWF requires the `mxmlc` tool from the [Flex SDK][]. If
-that tools is already installed then look in the `package.json` file for the
-commands to rebuild it. If you need the SDK installed, there is a npm module that installs it:
-
-    npm install
-
-To build a regular component:
-
-    npm run build
-
-Additional debug support can be built in with the following:
-
-    npm run build-debug
-
-Policy Server
--------------
-
-Flash support requires the use of a Policy Server.
-
-### Apache Flash Socket Policy Module
-
-[mod_fsp](./mod_fsp) provides an [Apache][] module that can serve up a Flash
-Socket Policy. See `mod_fsp/README` for more details. This module makes it easy
-to modify an [Apache][] server to allow cross domain requests to be made to it.
-
-### Simple Python Policy Server
-
-`policyserver.py` provides a very simple test policy server.
-
-### Simple Node.js Policy Server
-
-`policyserver.js` provides a very simple test policy server.  If a server is
-needed for production environments, please use another option such as perhaps
-[nodejs_socket_policy_server][].
-
-[Apache]: http://httpd.apache.org/
-[Flex SDK]: https://flex.apache.org/
-[nodejs_socket_policy_server]: https://github.com/bichinger/nodejs_socket_policy_server

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Lines of code

30755

0

Worsened metrics

Total package byte prevSize

1642114

-0.09%

Number of package files

59

-1.67%

No dependency changes