passport-saml-encrypted - npm Package Compare versions

Comparing version 0.1.8 to 0.1.9

package.json

 {
   "name": "passport-saml-encrypted",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "A Passport strategy for handling encrypted SAML authentication responses",
@@ -31,3 +31,3 @@ "main": "index.js",
     "xmldom": "~0.1.19",
-    "xml-encryption": "~0.11.2",
+    "xml-encryption": "~1.2.4",
     "xpath": "0.0.5",
@@ -34,0 +34,0 @@ "passport": "^0.3.x"

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

26771

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedescape-html@1.0.3(transitive)

• + Addednode-forge@0.10.0(transitive)

• + Addedxml-encryption@1.2.4(transitive)

• + Addedxmldom@0.6.0(transitive)

• + Addedxpath@0.0.32(transitive)

• - Removedasync@2.6.4(transitive)

• - Removedejs@2.7.4(transitive)

• - Removedlodash@4.17.21(transitive)

• - Removednode-forge@0.7.6(transitive)

• - Removedxml-encryption@0.11.2(transitive)

• - Removedxpath@0.0.27(transitive)

• Updatedxml-encryption@~1.2.4