octoflare - npm Package Compare versions

Comparing version 0.2.5 to 0.2.6

dist/verifyRequest.js

@@ -17,8 +17,2 @@ import crypto from 'node:crypto';
     }
-    const headerSignature = headers.get('X-Hub-Signature-256');
-    if (!headerSignature) {
-        return new Response(null, {
-            status: 403
-        });
-    }
     const signature = crypto
@@ -28,3 +22,3 @@ .createHmac('sha256', env.OCTOFLARE_WEBHOOK_SECRET)
         .digest('hex');
-    if (`sha256=${signature}` !== headerSignature) {
+    if (`sha256=${signature}` !== headers.get('X-Hub-Signature-256')) {
         return new Response(null, {
@@ -31,0 +25,0 @@ status: 403

package.json

 {
   "name": "octoflare",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "A framework for building GitHub Apps with Cloudflare Worker",
@@ -5,0 +5,0 @@ "type": "module",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

6655

decreased by-2.22%

Lines of code

81

decreased by-6.9%

No dependency changes