pem - npm Package Compare versions

Comparing version 1.14.6 to 1.14.7

package.json

@@ -13,3 +13,3 @@ {
   "description": "Create private keys and certificates with node.js and io.js",
-  "version": "1.14.6",
+  "version": "1.14.7",
   "repository": {
@@ -19,15 +19,17 @@ "type": "git",
   },
-  "main": "lib/pem",
+  "main": "./dist/index.js",
   "files": [
-    "lib/"
+    "dist"
   ],
+  "type": "commonjs",
   "scripts": {
-    "documentation": "npm run docco --silent && npm run jsdoc --silent",
+    "documentation": "yarn run docco && yarn run jsdoc",
     "docco": "docco -l parallel -o docs/docco lib/helper.js lib/openssl.js lib/pem.js",
     "jsdoc": "jsdoc -c jsdoc.json",
-    "changelog": "auto-changelog --output HISTORY.md",
-    "coverage": "cross-env NODE_ENV=development nyc ./node_modules/.bin/_mocha --opts mocha.opts $(find . -type f -name '*.spec.js'  ! -path './nyc_output/*' ! -path './coverage/*' ! -path './node_modules/*')",
-    "semantic-release": "semantic-release",
+    "build": "ncc build -m -s lib/pem.js -o dist",
+    "changelog": "auto-changelog -p --output HISTORY.md",
+    "coverage": "cross-env NODE_ENV=development nyc ./node_modules/.bin/_mocha --recursive --bail --inline-diffs --reporter spec --check-leaks --use_strict $(find . -type f -name '*.spec.js'  ! -path './nyc_output/*' ! -path './coverage/*' ! -path './node_modules/*')",
     "lint": "eslint --fix --config=./.eslintrc.js lib/*.js *.md *.json lib/*.js test/*.js test/*.spec.js",
-    "test": "npm run lint --silent && npm run coverage --silent"
+    "test": "yarn run lint && yarn run coverage",
+    "test:opensslv3.0.1": "yarn run build > openssl_v3.0.1.log && yarn run test >> openssl_v3.0.1.log"
   },
@@ -45,65 +47,34 @@ "nyc": {
   "dependencies": {
-    "es6-promisify": "^6.0.0",
-    "md5": "^2.2.1",
-    "os-tmpdir": "^1.0.1",
+    "es6-promisify": "^7.0.0",
+    "md5": "^2.3.0",
+    "os-tmpdir": "^1.0.2",
     "which": "^2.0.2"
   },
   "devDependencies": {
-    "@deineagenturug/docdash": "^0.4.2",
-    "@semantic-release/changelog": "^3.0.6",
-    "@semantic-release/git": "^8.0.0",
-    "@semantic-release/github": "^6.0.2",
-    "@semantic-release/npm": "^6.0.0",
-    "ajv": "^6.11.0",
-    "auto-changelog": "^1.16.2",
-    "chai": "^4.1.2",
-    "cross-env": "^7.0.0",
-    "dirty-chai": "^2.0.1",
-    "docco": "^0.8.0",
-    "eslint": "^6.8.0",
-    "eslint-config-standard": "^14.1.0",
-    "eslint-plugin-import": "^2.20.0",
-    "eslint-plugin-json": "^2.0.1",
-    "eslint-plugin-markdown": "^1.0.1",
-    "eslint-plugin-node": "^11.0.0",
-    "eslint-plugin-promise": "^4.0.1",
-    "eslint-plugin-standard": "^4.0.0",
-    "jsdoc": "^3.5.5",
-    "marked": "^0.8.0",
-    "mocha": "^7.0.0",
-    "nyc": "^15.0.0",
-    "semantic-release": "^16.0.3",
-    "travis-deploy-once": "^5.0.10"
+    "@deineagenturug/docdash": "0.4.2",
+    "@types/chai": "4.3.1",
+    "@types/dirty-chai": "2.0.2",
+    "@vercel/ncc": "0.33.4",
+    "auto-changelog": "2.4.0",
+    "chai": "4.3.6",
+    "cross-env": "7.0.3",
+    "dirty-chai": "2.0.1",
+    "docco": "0.9.1",
+    "eslint": "8.14.0",
+    "eslint-plugin-chai-friendly": "0.7.2",
+    "eslint-plugin-eslint-plugin": "4.1.0",
+    "eslint-plugin-import": "2.26.0",
+    "eslint-plugin-json": "3.1.0",
+    "eslint-plugin-markdown": "2.2.1",
+    "eslint-plugin-mocha": "^10.1.0",
+    "eslint-plugin-n": "15.2.0",
+    "eslint-plugin-promise": "6.0.0",
+    "jsdoc": "3.6.10",
+    "marked": "4.0.14",
+    "mocha": "^10.2.0",
+    "nyc": "15.1.0"
   },
   "engines": {
-    "node": ">=6.0.0"
-  },
-  "release": {
-    "debug": false,
-    "verifyConditions": [
-      "@semantic-release/changelog",
-      "@semantic-release/npm",
-      "@semantic-release/git",
-      "@semantic-release/github"
-    ],
-    "prepare": [
-      "@semantic-release/changelog",
-      "@semantic-release/npm",
-      {
-        "path": "@semantic-release/git",
-        "assets": [
-          "CHANGELOG.md",
-          "HISTORY.md",
-          "package.json",
-          "package-lock.json",
-          "npm-shrinkwrap.json"
-        ],
-        "message": "chore(release): ${nextRelease.version} [skip ci]\n\n${nextRelease.notes}"
-      }
-    ],
-    "publish": [
-      "@semantic-release/npm",
-      "@semantic-release/github"
-    ]
+    "node": ">=14.0.0"
   }
 }

README.md

@@ -6,5 +6,4 @@ pem
 
-[![Build Status](https://secure.travis-ci.org/Dexus/pem.png)](http://travis-ci.org/Dexus/pem) [![npm version](https://badge.fury.io/js/pem.svg)](http://badge.fury.io/js/pem) [![npm downloads](https://img.shields.io/npm/dt/pem.svg)](https://www.npmjs.com/package/pem) [![pem documentation](https://img.shields.io/badge/pem-documentation-0099ff.svg?style=flat)](https://dexus.github.io/pem/jsdoc/) [![Greenkeeper badge](https://badges.greenkeeper.io/Dexus/pem.svg)](https://greenkeeper.io/)
+[![Build Status](https://secure.travis-ci.org/Dexus/pem.png)](http://travis-ci.org/Dexus/pem) [![npm version](https://badge.fury.io/js/pem.svg)](http://badge.fury.io/js/pem) [![npm downloads](https://img.shields.io/npm/dt/pem.svg)](https://www.npmjs.com/package/pem) [![pem documentation](https://img.shields.io/badge/pem-documentation-0099ff.svg?style=flat)](https://dexus.github.io/pem/jsdoc/)
 
-
 [![JavaScript Style Guide](https://cdn.rawgit.com/standard/standard/master/badge.svg)](https://github.com/standard/standard)
@@ -18,7 +17,17 @@
 
+or use yarn
+
+    yarn add pem
+
+:warning: Please make sure you have `openssl` or `libressl` already installed on your system/container, without
+them `pem` will not work.
+
 ## Examples
 
-Here are some examples for creating an SSL key/cert on the fly, and running an HTTPS server on port 443.  443 is the standard HTTPS port, but requires root permissions on most systems.  To get around this, you could use a higher port number, like 4300, and use https://localhost:4300 to access your server.
+Here are some examples for creating an SSL key/cert on the fly, and running an HTTPS server on port 443. 443 is the
+standard HTTPS port, but requires root permissions on most systems. To get around this, you could use a higher port
+number, like 4300, and use https://localhost:4300 to access your server.
 
 ### Basic https
+
 ```javascript
@@ -32,3 +41,3 @@ var https = require('https')
   }
-  https.createServer({ key: keys.serviceKey, cert: keys.certificate }, function (req, res) {
+  https.createServer({ key: keys.clientKey, cert: keys.certificate }, function (req, res) {
     res.end('o hai!')
@@ -55,3 +64,3 @@ }).listen(443)
 
-  https.createServer({ key: keys.serviceKey, cert: keys.certificate }, app).listen(443)
+  https.createServer({ key: keys.clientKey, cert: keys.certificate }, app).listen(443)
 })
@@ -316,3 +325,3 @@ ```
 
-**Warning: If you specify `altNames` the custom extensions file will not be passed to OpenSSL.**
+:warning: **Warning: If you specify `altNames` the custom extensions file will not be passed to OpenSSL.**
 
@@ -331,4 +340,17 @@ ### Setting openssl location
 
-### Specialthanks to
+### :warning: CSR/Certificates with special chars
+For more details, search in `test/pem.spec.js`: `Create CSR with specialchars config file`
 
+If you use special chars like:
+
+```
+-!$%^&*()_+|~=`{}[]:/;<>?,.@#
+```
+
+You should know that the result mey have escaped characters when you read it in your application.
+Will try to fix this in the future, but not sure.
+
+
+### Special thanks to
+
 - Andris Reinman (@andris9) - Initiator of pem
@@ -335,0 +357,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 12 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Minified code

Quality

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

269437

increased by248.71%

Dev dependency count

22

decreased by-12%

Number of lines in readme file

355

increased by6.61%

Worsened metrics

Lines of code

155

decreased by-91.38%

Number of low quality alerts

3

increased by200%

Number of low supply chain risk alerts

28

increased by366.67%

Dependency changes

• + Addedes6-promisify@7.0.0(transitive)

• - Removedes6-promisify@6.1.1(transitive)

• Updatedes6-promisify@^7.0.0

• Updatedmd5@^2.3.0

• Updatedos-tmpdir@^1.0.2