passport-saml - npm Package Compare versions

Comparing version 0.12.0 to 0.13.0

lib/passport-saml/saml.js

@@ -666,3 +666,7 @@ var zlib = require('zlib');
     if (attributeStatement) {
-      var attributes = attributeStatement[0].Attribute;
+      var attributes = [].concat.apply([], attributeStatement.filter(function (attr) {
+        return Array.isArray(attr.Attribute);
+      }).map(function (attr) {
+        return attr.Attribute;
+      }));
 
@@ -675,2 +679,6 @@ var attrValueMapper = function(value) {
         attributes.forEach(function (attribute) {
+         if(!attribute.hasOwnProperty('AttributeValue')) {
+            // if attributes has no AttributeValue child, continue
+            return;
+          }
           var value = attribute.AttributeValue;
@@ -677,0 +685,0 @@ if (value.length === 1) {

lib/passport-saml/strategy.js

@@ -1,2 +0,2 @@
-var passport = require('passport');
+var passport = require('passport-strategy');
 var util = require('util');
@@ -3,0 +3,0 @@ var saml = require('./saml');

package.json

 {
   "name": "passport-saml",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "licenses": [
@@ -33,6 +33,6 @@ {
   "dependencies": {
-    "passport": "0.2.x",
+    "passport-strategy": "*",
     "q": "1.1.x",
     "xml2js": "0.4.x",
-    "xml-crypto": "0.6.x",
+    "xml-crypto": "0.8.x",
     "xmldom": "0.1.x",
@@ -50,3 +50,4 @@ "xmlbuilder": "2.5.x",
     "should": "*",
-    "sinon": "^1.10.2"
+    "sinon": "^1.10.2",
+    "passport": "0.3.x"
   },
@@ -53,0 +54,0 @@ "engines": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

274638

increased by4.98%

Number of package files

28

increased by3.7%

Lines of code

2611

increased by3.24%

Worsened metrics

Dev dependency count

9

increased by12.5%

Number of medium quality alerts

1

increased byInfinity%

Number of low supply chain risk alerts

33

increased by6.45%

Dependency changes

• + Addedpassport-strategy@*

• + Addedxml-crypto@0.8.5(transitive)

• - Removedpassport@0.2.x

• - Removedpassport@0.2.2(transitive)

• - Removedpause@0.0.1(transitive)

• - Removedxml-crypto@0.6.1(transitive)

• Updatedxml-crypto@0.8.x