node-jose - npm Package Compare versions

Comparing version 0.8.0 to 0.8.1

CHANGELOG.md

@@ -0,1 +1,17 @@
+<a name="0.8.1"></a>
+# [0.8.1](https://github.com/cisco/node-jose/compare/0.8.0...0.8.1) (2016-07-13)
+
+### Fix
+
+* Documentation typo ([c8e27f517ce444ac13a8602f4e83da664c6fb34e](https://github.com/cisco/node-jose/commit/c8e27f517ce444ac13a8602f4e83da664c6fb34e))
+* Issues with latest browserify-buffer ([476e4d7fe743a50b6fd62ef1259d2db03d2313eb](https://github.com/cisco/node-jose/commit/476e4d7fe743a50b6fd62ef1259d2db03d2313eb))
+* Typo in lib/algorithms/constants ([480721085b405c24349d5ead321c01d92941bdd2](https://github.com/cisco/node-jose/commit/480721085b405c24349d5ead321c01d92941bdd2))
+* Remove warnings from webpack ([5056b6e29168ff147a948da908f305f90b60c45e](https://github.com/cisco/node-jose/commit/5056b6e29168ff147a948da908f305f90b60c45e))
+
+### Build
+
+* Further restrict what is published ([8e8f779cf84fe4d359123fa502276dfcad47ba0b](https://github.com/cisco/node-jose/commit/8e8f779cf84fe4d359123fa502276dfcad47ba0b))
+* Reconcile git-prefixed dependencies ([2b6bd1ec3f61ae301c9d631c1ff623b480ddd31b](https://github.com/cisco/node-jose/commit/2b6bd1ec3f61ae301c9d631c1ff623b480ddd31b))
+
+
 <a name="0.8.0"></a>
@@ -2,0 +18,0 @@ # [0.8.0](https://github.com/cisco/node-jose/compare/0.7.1...0.8.0) (2016-04-18)

lib/algorithms/aes-cbc-hmac-sha2.js

@@ -76,5 +76,3 @@ /*!
     promise = promise.then(function(cdata) {
-      // wrap in *augmented* Uint8Array -- Buffer without copies
-      cdata = new Uint8Array(cdata);
-      cdata = Buffer._augment(cdata);
+      cdata = new Buffer(cdata);
       return cdata;
@@ -169,5 +167,3 @@ });
     promise = promise.then(function(pdata) {
-      // wrap in *augmented* Uint8Array -- Buffer without copies
-      pdata = new Uint8Array(pdata);
-      pdata = Buffer._augment(pdata);
+      pdata = new Buffer(pdata);
       return pdata;
@@ -174,0 +170,0 @@ });

lib/algorithms/aes-gcm.js

@@ -111,11 +111,7 @@ /*!
 
-      // wrap in *augmented* Uint8Array -- Buffer without copies
       var tag = result.slice(tagStart);
-      tag = new Uint8Array(tag);
-      tag = Buffer._augment(tag);
+      tag = new Buffer(tag);
 
-      // wrap in *augmented* Uint8Array -- Buffer without copies
       var cdata = result.slice(0, tagStart);
-      cdata = new Uint8Array(cdata);
-      cdata = Buffer._augment(cdata);
+      cdata = new Buffer(cdata);
 
@@ -278,5 +274,3 @@ return {
     promise = promise.then(function(pdata) {
-      // wrap *augmented* Uint8Array -- Buffer without copies
-      pdata = new Uint8Array(pdata);
-      pdata = Buffer._augment(pdata);
+      pdata = new Buffer(pdata);
       return pdata;
@@ -283,0 +277,0 @@ });

lib/algorithms/aes-kw.js

@@ -117,5 +117,3 @@ /*!
     promise = promise.then(function(result) {
-      // wrap in *augmented* Uint8Array -- Buffer without copies
-      result = new Uint8Array(result);
-      result = Buffer._augment(result);
+      result = new Buffer(result);
 
@@ -200,5 +198,3 @@ return {
     promise = promise.then(function(result) {
-      // wrap in *augmented* Uint8Array -- Buffer without copies
-      result = new Uint8Array(result);
-      result = Buffer._augment(result);
+      result = new Buffer(result);
       return result;
@@ -205,0 +201,0 @@ });

lib/algorithms/constants.js

@@ -39,3 +39,3 @@ /*!
     "ECDH-ES+A192KW": 192,
-    "ECDH-EC+A256KW": 256
+    "ECDH-ES+A256KW": 256
   },
@@ -42,0 +42,0 @@ NONCELENGTH: {

lib/algorithms/ecdh.js

@@ -110,4 +110,3 @@ /*!
     promise = promise.then(function(result) {
-      result = new Uint8Array(result);
-      Buffer._augment(result);
+      result = new Buffer(result);
       return result;
@@ -114,0 +113,0 @@ });

lib/algorithms/ecdsa.js

@@ -74,4 +74,3 @@ /*!
     promise = promise.then(function(result) {
-      result = new Uint8Array(result);
-      result = Buffer._augment(result);
+      result = new Buffer(result);
       return {
@@ -78,0 +77,0 @@ data: pdata,

lib/algorithms/helpers.js

@@ -52,4 +52,3 @@ /*!
   try {
-    var pkgname = "crypto";
-    crypto = require(pkgname);
+    crypto = require("crypto");
   } catch (err) {
@@ -59,2 +58,7 @@ return undefined;
 
+  if (!Object.keys(crypto).length) {
+    // treat empty the same as missing
+    return undefined;
+  }
+
   return crypto;
@@ -61,0 +65,0 @@ }

lib/algorithms/hmac.js

@@ -54,5 +54,3 @@ /*!
     promise = promise.then(function(result) {
-      // wrap in *augmented* Uint8Array - Buffer without copies
-      var sig = new Uint8Array(result);
-      sig = Buffer._augment(sig);
+      var sig = new Buffer(result);
       return {
@@ -142,5 +140,3 @@ data: pdata,
       promise = promise.then(function(result) {
-        // wrap in *augmented* Uint8Array - Buffer without copies
-        var sig = new Uint8Array(result);
-        sig = Buffer._augment(sig);
+        var sig = new Buffer(result);
         return compare(true, mac, sig);
@@ -147,0 +143,0 @@ });

lib/algorithms/rsaes.js

@@ -67,5 +67,3 @@ /*!
       promise = promise.then(function(result) {
-        // wrap in *augmented* Uint8Array - Buffer without copies
-        var cdata = new Uint8Array(result);
-        cdata = Buffer._augment(cdata);
+        var cdata = new Buffer(result);
         return {
@@ -134,5 +132,3 @@ data: cdata
       promise = promise.then(function(result) {
-        // wrap in *augmented* Uint8Array - Buffer without copies
-        var pdata = new Uint8Array(result);
-        pdata = Buffer._augment(pdata);
+        var pdata = new Buffer(result);
         return pdata;
@@ -139,0 +135,0 @@ });

lib/algorithms/rsassa.js

@@ -53,5 +53,3 @@ /*!
     promise = promise.then(function(result) {
-      // wrap in *augmented* Uint8Array - Buffer without copies
-      var sig = new Uint8Array(result);
-      sig = Buffer._augment(sig);
+      var sig = new Buffer(result);
       return {
@@ -58,0 +56,0 @@ data: pdata,

lib/algorithms/sha.js

@@ -32,5 +32,3 @@ /*!
     promise = promise.then(function(result) {
-      // wrap in *augmented* Uint8Array -- Buffer without copies
-      result = new Uint8Array(result);
-      result = Buffer._augment(result);
+      result = new Buffer(result);
       return result;
@@ -37,0 +35,0 @@ });

lib/jwe/defaults.js

@@ -27,5 +27,5 @@ /*!
  * @property {String|String[]} protect The names of the headers to integrity
- *           protect.  The value `""` means that none of header parameters
+ *           protect.  The value `""` means that none of the header parameters
  *           are integrity protected, while `"*"` (the default) means that all
- *           headers parameter sare integrity protected.
+ *           header parameters are integrity protected.
  */
@@ -32,0 +32,0 @@ var JWEDefaults = {

lib/util/databuffer.js

@@ -260,8 +260,2 @@ /*!
 DataBuffer.prototype.putBytes = function(bytes, encoding) {
-  function augmentIt(src) {
-    return (Buffer._augment) ?
-           Buffer._augment(src) :
-           new Buffer(src);
-  }
-
   if ("string" === typeof bytes) {
@@ -307,3 +301,3 @@ // fixup encoding
     src = new Uint8Array(bytes);
-    src = augmentIt(src);
+    src = new Buffer(src);
   } else if (forge.util.isArrayBufferView(bytes)) {
@@ -315,3 +309,3 @@ src = (bytes instanceof Uint8Array) ?
                              bytes.byteLength);
-    src = augmentIt(src);
+    src = new Buffer(src);
   } else {
@@ -318,0 +312,0 @@ throw new TypeError("invalid source type");

package.json

 {
   "name": "node-jose",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "A JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers",
@@ -30,3 +30,3 @@ "main": "lib/index.js",
     "es6-promise": "^3.1.2",
-    "jsbn": "git+https://github.com/andyperlitch/jsbn.git",
+    "jsbn": "^0.1.0",
     "lodash.assign": "^4.0.8",
@@ -43,4 +43,4 @@ "lodash.clone": "^4.3.2",
     "long": "^3.1.0",
-    "node-forge": "git+https://github.com/linuxwolf/forge.git#master",
-    "urlsafe-base64": "git+https://github.com/linuxwolf/urlsafe-base64.git#encoding",
+    "node-forge": "https://github.com/linuxwolf/forge/archive/browserify.tar.gz",
+    "urlsafe-base64": "https://github.com/linuxwolf/urlsafe-base64/archive/encoding.tar.gz",
     "uuid": "^2.0.1"
@@ -47,0 +47,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 2 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 3 instances in 1 package

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Number of medium maintenance alerts

0

decreased by-100%

Number of high supply chain risk alerts

2

decreased by-33.33%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

307352

decreased by-91.05%

Number of package files

60

decreased by-3.23%

Lines of code

9100

decreased by-83.6%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedjsbn@0.1.1(transitive)

• Updatedjsbn@^0.1.0

• Updatednode-forge@https://github.com/linuxwolf/forge/archive/browserify.tar.gz

• Updatedurlsafe-base64@https://github.com/linuxwolf/urlsafe-base64/archive/encoding.tar.gz