node-jose - npm Package Compare versions

Comparing version 1.1.4 to 2.0.0

CHANGELOG.md

 # Release Notes
 
+## [2.0.0](https://github.com/cisco/node-jose/compare/1.1.4...2.0.0) (2020-09-20)
+
+While all of the changes in this release are only dependency updates and otherwise patch-level changes, it does break compatibility with versions of node.js older than version 10.
+
+### Update
+
+* switch to `karma-safari-applescript-launcher` for improved local Safari testing ([a0db723](https://github.com/cisco/node-jose/commit/a0db7230205d8bb6bfd8d06b7a1ffb4b036700fd))
+* update dependencies for `karma`, `karma-mocha`, `mocha`, `webpack-stream`, and `yargs` ([96ee8ff](https://github.com/cisco/node-jose/commit/96ee8ff70dc9fbf08309cf4f5240f3affbffb16d))
+* update `node-forge` to latest (shahar-h)([277aab5](https://github.com/cisco/node-jose/commit/277aab5c4c1c5b6b6c3923663d40aa9412f9f49d))
+* cherry-pick `lodash` modules to effect smaller footprint (tychenjianjun)([003ef1c](https://github.com/cisco/node-jose/commit/003ef1c1488c5006976e4ead72bf40f63c4b098d))
+*  replace `browserify-zlib` with `pako` (taymoork2)([85610d6](https://github.com/cisco/node-jose/commit/85610d6fdf411c72f58d15197e6f935e0b20a695))
+
 ## [1.1.4](https://github.com/cisco/node-jose/compare/1.1.3...1.1.4) (2020-03-26)
@@ -4,0 +16,0 @@

lib/algorithms/ec-util.js

@@ -8,3 +8,3 @@ /*!
 
-var clone = require("lodash").clone,
+var clone = require("lodash/clone"),
     ecc = require("../deps/ecc"),
@@ -11,0 +11,0 @@ forge = require("../deps/forge.js"),

lib/algorithms/ecdh.js

@@ -8,4 +8,3 @@ /*!
 
-var lodash = require("lodash"),
-    merge = require("../util/merge"),
+var merge = require("../util/merge"),
     util = require("../util"),
@@ -19,5 +18,5 @@ ecUtil = require("./ec-util.js"),
 
-var clone = lodash.clone;
-var omit = lodash.omit;
-var pick = lodash.pick;
+var clone = require("lodash/clone");
+var omit = require("lodash/omit");
+var pick = require("lodash/pick");
 
@@ -24,0 +23,0 @@ function idealHash(curve) {

lib/algorithms/rsa-util.js

@@ -8,3 +8,3 @@ /*!
 
-var clone = require("lodash").clone,
+var clone = require("lodash/clone"),
     forge = require("../deps/forge.js"),
@@ -11,0 +11,0 @@ util = require("../util");

lib/deps/ciphermodes/gcm/helpers.js

@@ -9,3 +9,3 @@ /*!
 var Long = require("long"),
-    fill = require("lodash").fill,
+    fill = require("lodash/fill"),
     pack = require("../pack.js");
@@ -12,0 +12,0 @@

lib/jwe/decrypt.js

@@ -12,3 +12,3 @@ /*!
     merge = require("../util/merge"),
-    zlib = require("zlib");
+    pako = require("pako");
 
@@ -289,13 +289,13 @@ var DEFAULT_OPTIONS = {
           return new Promise(function(resolve, reject) {
-            zlib.inflateRaw(Buffer.from(jwe.plaintext), function(err, data) {
-              if (err) {
-                reject(err);
-              }
-              else {
-                jwe.payload = jwe.plaintext = data;
-                resolve(jwe);
-              }
-            });
+            try {
+              var data = pako.inflateRaw(Buffer.from(jwe.plaintext))
+
+              jwe.payload = jwe.plaintext = Buffer.from(data);
+              resolve(jwe);
+            } catch (err) {
+              reject(err);
+            }
           });
         }
+
         return jwe;
@@ -302,0 +302,0 @@ });

lib/jwe/encrypt.js

@@ -8,13 +8,11 @@ /*!
 
-var lodash = require("lodash"),
-    util = require("../util"),
+var util = require("../util"),
     generateCEK = require("./helpers").generateCEK,
     JWK = require("../jwk"),
     slice = require("./helpers").slice,
-    zlib = require("zlib"),
+    pako = require("pako"),
     CONSTANTS = require("../algorithms/constants");
 
-var assign = lodash.assign;
-var clone = lodash.clone;
-
+var assign = require("lodash/assign");
+var clone = require("lodash/clone");
 var DEFAULTS = require("./defaults");
@@ -373,11 +371,10 @@
           return new Promise(function(resolve, reject) {
-            zlib.deflateRaw(Buffer.from(pdata, "binary"), function(err, data) {
-              if (err) {
-                reject(err);
-              }
-              else {
-                jwe.plaintext = data;
-                resolve(jwe);
-              }
-            });
+            try {
+              var data = pako.deflateRaw(Buffer.from(pdata, "binary"));
+
+              jwe.plaintext = data;
+              resolve(jwe);
+            } catch (error) {
+              reject(error);
+            }
           });
@@ -384,0 +381,0 @@ }

lib/jwk/basekey.js

@@ -8,13 +8,12 @@ /*!
 
-var lodash = require("lodash"),
-    merge = require("../util/merge"),
+var merge = require("../util/merge"),
     uuid = require("uuid");
 
-var assign = lodash.assign;
-var clone = lodash.clone;
-var flatten = lodash.flatten;
-var intersection = lodash.intersection;
-var omit = lodash.omit;
-var pick = lodash.pick;
-var uniq = lodash.uniq;
+var assign = require("lodash/assign");
+var clone = require("lodash/clone");
+var flatten = require("lodash/flatten");
+var intersection = require("lodash/intersection");
+var omit = require("lodash/omit");
+var pick = require("lodash/pick");
+var uniq = require("lodash/uniq");
 
@@ -21,0 +20,0 @@ var ALGORITHMS = require("../algorithms"),

lib/jwk/helpers.js

@@ -8,3 +8,3 @@ /*!
 
-var clone = require("lodash").clone,
+var clone = require("lodash/clone"),
     util = require("../util"),
@@ -11,0 +11,0 @@ forge = require("../deps/forge");

lib/jwk/keystore.js

@@ -8,3 +8,3 @@ /*!
 
-var clone = require("lodash").clone,
+var clone = require("lodash/clone"),
     merge = require("../util/merge"),
@@ -11,0 +11,0 @@ forge = require("../deps/forge"),

lib/jws/sign.js

@@ -8,4 +8,3 @@ /*!
 
-var lodash = require("lodash"),
-    merge = require("../util/merge"),
+var merge = require("../util/merge"),
     util = require("../util"),
@@ -15,4 +14,4 @@ JWK = require("../jwk"),
 
-var clone = lodash.clone;
-var uniq = lodash.uniq;
+var clone = require("lodash/clone");
+var uniq = require("lodash/uniq");
 
@@ -19,0 +18,0 @@ var DEFAULTS = require("./defaults");

lib/jws/verify.js

@@ -8,3 +8,3 @@ /*!
 
-var clone = require("lodash").clone,
+var clone = require("lodash/clone"),
     merge = require("../util/merge"),
@@ -11,0 +11,0 @@ base64url = require("../util/base64url"),

lib/util/merge.js

@@ -8,7 +8,5 @@ /*!
 
-var lodash = require("lodash");
+var partialRight = require("lodash/partialRight");
+var merge = require("lodash/merge");
 
-var partialRight = lodash.partialRight;
-var merge = lodash.merge;
-
 var typedArrayCtors = (function() {
@@ -15,0 +13,0 @@ var ctors = [];

package.json

 {
   "name": "node-jose",
-  "version": "1.1.4",
+  "version": "2.0.0",
   "description": "A JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers",
@@ -31,11 +31,10 @@ "keywords": [
     "crypto": false,
-    "zlib": "browserify-zlib"
+    "zlib": "pako"
   },
   "react-native": {
     "crypto": false,
-    "zlib": "react-zlib-js"
+    "zlib": "pako"
   },
   "dependencies": {
     "base64url": "^3.0.1",
-    "browserify-zlib": "^0.2.0",
     "buffer": "^5.5.0",
@@ -45,5 +44,5 @@ "es6-promise": "^4.2.8",
     "long": "^4.0.0",
-    "node-forge": "^0.8.5",
+    "node-forge": "^0.10.0",
+    "pako": "^1.0.11",
     "process": "^0.11.10",
-    "react-zlib-js": "^1.0.4",
     "uuid": "^3.3.3"
@@ -68,3 +67,3 @@ },
     "json-loader": "^0.5.4",
-    "karma": "^2.0.0",
+    "karma": "^5.2.2",
     "karma-chrome-launcher": "^2.0.0",
@@ -74,15 +73,15 @@ "karma-coverage": "^1.1.1",
     "karma-ie-launcher": "^1.0.0",
-    "karma-mocha": "^1.3.0",
+    "karma-mocha": "^2.0.1",
     "karma-mocha-reporter": "^2.0.0",
-    "karma-safari-launcher": "^1.0.0",
+    "karma-safari-applescript-launcher": "^0.1.0",
     "karma-sauce-launcher": "^1.1.0",
     "karma-sourcemap-loader": "^0.3.7",
     "karma-webpack": "^3.0.0",
-    "mocha": "^5.0.0",
+    "mocha": "^8.1.3",
     "run-sequence": "^2.0.0",
     "watchify": "^3.11.1",
     "webpack": "^4.39.3",
-    "webpack-stream": "^4.0.0",
-    "yargs": "^11.1.0"
+    "webpack-stream": "^6.1.0",
+    "yargs": "^16.0.3"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

349112

increased by0.28%

Dependency count

9

decreased by-10%

Worsened metrics

Lines of code

9867

decreased by-0.09%

Dependency changes

• + Addedpako@^1.0.11

• + Addednode-forge@0.10.0(transitive)

• - Removedbrowserify-zlib@^0.2.0

• - Removedreact-zlib-js@^1.0.4

• - Removedbrowserify-zlib@0.2.0(transitive)

• - Removednode-forge@0.8.5(transitive)

• - Removedreact-zlib-js@1.0.5(transitive)

• Updatednode-forge@^0.10.0