node-rsa - npm Package Compare versions

Comparing version 0.2.25 to 0.2.26

gruntfile.js

@@ -0,0 +0,0 @@ module.exports = function (grunt) {

package.json

 {
   "name": "node-rsa",
-  "version": "0.2.25",
+  "version": "0.2.26",
   "description": "Node.js RSA library",
@@ -40,5 +40,5 @@ "main": "src/NodeRSA.js",
   "dependencies": {
-    "lodash": "3.3.0",
-    "asn1": "0.2.2"
+    "asn1": "0.2.3",
+    "lodash": "3.3.0"
   }
 }

README.md

@@ -0,0 +0,0 @@ # Node-RSA

src/encryptEngines/encryptEngines.js

@@ -0,0 +0,0 @@ var crypt = require('crypto');

src/encryptEngines/io.js

@@ -0,0 +0,0 @@ var crypto = require('crypto');

src/encryptEngines/js.js

@@ -0,0 +0,0 @@ var BigInteger = require('../libs/jsbn.js');

src/encryptEngines/node12.js

@@ -0,0 +0,0 @@ var crypto = require('crypto');

src/formats/formats.js

@@ -0,0 +0,0 @@ var _ = require('lodash');

src/formats/pkcs1.js

@@ -0,0 +0,0 @@ var ber = require('asn1').Ber;

src/formats/pkcs8.js

@@ -0,0 +0,0 @@ var ber = require('asn1').Ber;

src/libs/jsbn.js

@@ -0,0 +0,0 @@ /*

src/libs/rsa.js

@@ -0,0 +0,0 @@ /*

src/NodeRSA.js

@@ -0,0 +0,0 @@ /*!

src/schemes/oaep.js

@@ -0,0 +0,0 @@ /**

src/schemes/pkcs1.js

@@ -0,0 +0,0 @@ /**

src/schemes/pss.js

@@ -0,0 +0,0 @@ /**

src/schemes/schemes.js

@@ -0,0 +0,0 @@ module.exports = {

src/utils.js

@@ -0,0 +0,0 @@ /*

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

1

decreased by-80%

Worsened metrics

Total package byte prevSize

155018

decreased by-92.01%

Number of package files

30

decreased by-30.23%

Lines of code

3080

decreased by-94.37%

Dependency changes

• + Addedasn1@0.2.3(transitive)

• - Removedasn1@0.2.2(transitive)

• Updatedasn1@0.2.3