object-hash - npm Package Compare versions

Comparing version 0.5.0 to 0.6.0

index.js

@@ -130,3 +130,3 @@ 'use strict';
         return keys.forEach(function(key){
-          hashFn.update(key);
+          hashFn.update(key, 'utf8');
           if(!options.excludeValues) {
@@ -148,3 +148,3 @@ typeHasher(hashFn, options, context).dispatch(object[key]);
     _error: function(err){
-      return hashFn.update('error:' + err.toString());
+      return hashFn.update('error:' + err.toString(), 'utf8');
     },
@@ -155,6 +155,6 @@ _boolean: function(bool){
     _string: function(string){
-      return hashFn.update('string:' + string);
+      return hashFn.update('string:' + string, 'utf8');
     },
     _function: function(fn){
-      return hashFn.update('fn:' + fn.toString());
+      return hashFn.update('fn:' + fn.toString(), 'utf8');
     },
@@ -165,3 +165,3 @@ _number: function(number){
     _xml: function(xml){
-      return hashFn.update('xml:' + xml.toString());
+      return hashFn.update('xml:' + xml.toString(), 'utf8');
     },
@@ -175,3 +175,3 @@ _null: function(){
     _regexp: function(regex){
-      return hashFn.update('regex:' + regex.toString());
+      return hashFn.update('regex:' + regex.toString(), 'utf8');
     },
@@ -178,0 +178,0 @@ _uint8array: function(arr){

package.json

 {
   "name": "object-hash",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Generate hashes from javascript objects in node and the browser.",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/puleos/object-hash",

test/index.js

@@ -145,2 +145,10 @@ var test = require('tape');
 
+test("utf8 strings are hashed correctly", function(assert) {
+  assert.plan(1);
+  var hash1 = hash('\u03c3'); // cf 83 in utf8
+  var hash2 = hash('\u01c3'); // c7 83 in utf8
+  console.log('!!', hash1, hash2);
+  assert.notEqual(hash1, hash2, "different strings with similar utf8 encodings should produce different hashes");
+});
+
 if (typeof Buffer !== 'undefined') {
@@ -147,0 +155,0 @@ test("Buffers can be hashed", function(assert) {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

314833

increased by0.12%

Lines of code

6478

increased by0.11%

Number of low supply chain risk alerts

6

decreased by-14.29%

No dependency changes