pg - npm Package Compare versions

Comparing version 8.4.1 to 8.4.2

lib/client.js

@@ -60,2 +60,11 @@ 'use strict'
     this.ssl = this.connectionParameters.ssl || false
+    // As with Password, make SSL->Key (the private key) non-enumerable.
+    // It won't show up in stack traces
+    // or if the client is console.logged
+    if (this.ssl && this.ssl.key) {
+      Object.defineProperty(this.ssl, 'key', {
+        enumerable: false,
+      })
+    }
+
     this._connectionTimeoutMillis = c.connectionTimeoutMillis || 0
@@ -62,0 +71,0 @@ }

lib/connection-parameters.js

@@ -87,2 +87,7 @@ 'use strict'
     }
+    if (this.ssl && this.ssl.key) {
+      Object.defineProperty(this.ssl, 'key', {
+        enumerable: false,
+      })
+    }
 
@@ -89,0 +94,0 @@ this.client_encoding = val('client_encoding', config)

package.json

 {
   "name": "pg",
-  "version": "8.4.1",
+  "version": "8.4.2",
   "description": "PostgreSQL client - pure javascript & libpq with the same API",
@@ -25,3 +25,3 @@ "keywords": [
     "pg-connection-string": "^2.4.0",
-    "pg-pool": "^3.2.1",
+    "pg-pool": "^3.2.2",
     "pg-protocol": "^1.3.0",
@@ -56,3 +56,3 @@ "pg-types": "^2.1.0",
   },
-  "gitHead": "36342c9a84b68123f666879a9f34ac319a44727a"
+  "gitHead": "b6d69d5bc2eb7df4f4e04bc864b133b795c76a7f"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

68321

increased by0.6%

Lines of code

1945

increased by0.67%

Dependency changes

• Updatedpg-pool@^3.2.2