rsa-unpack - npm Package Compare versions

Comparing version 0.0.2 to 0.0.3

example/pair.js

 var fs = require('fs');
-var keys = require('./keys.json');
+var path = require('path');
+var keys = require(path.resolve(process.argv[2]));
 
@@ -4,0 +5,0 @@ var unpack = require('../');

example/unpack.js

 var fs = require('fs');
-var keys = require('./keys.json');
+var path = require('path');
+var keys = require(path.resolve(process.argv[2] || 'keys.json'));
 
@@ -4,0 +5,0 @@ var unpack = require('../');

index.js

@@ -15,4 +15,4 @@ module.exports = function (pem) {
     var offset = {
-        private : 7,
-        public : 3,
+        private : buf[1] - 0x80 + 5,
+        public : buf[1] - 0x80 + 2,
     }[type];
@@ -24,4 +24,7 @@
         if (s & 0x80) {
-            offset ++;
-            s = buf.readUInt8(offset + 1);
+            var n = s - 0x80;
+            s = buf[[
+                'readUInt8', 'readUInt16BE'
+            ][n - 1]](offset + 2);
+            offset += n;
         }
@@ -28,0 +31,0 @@

package.json

 {
     "name" : "rsa-unpack",
-    "version" : "0.0.2",
+    "version" : "0.0.3",
     "description" : "unpack rsa fields from PEM strings",
@@ -5,0 +5,0 @@ "main" : "index.js",

test/expected.js

@@ -6,2 +6,3 @@ var test = require('tap').test;
     require('./data/expected2.json'),
+    require('./data/expected3.json'),
 ];
@@ -12,2 +13,3 @@ var keys = [
     require('./data/keys2.json'),
+    require('./data/keys3.json'),
 ];
@@ -17,3 +19,3 @@ var unpack = require('../');
 test('output matches openssl rsa -text', function (t) {
-    t.plan(12);
+    t.plan(keys.length * 4);
     
@@ -20,0 +22,0 @@ keys.forEach(function (key, ix) {

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

33635

increased by54.89%

Number of package files

23

increased by15%

Lines of code

194

increased by19.75%

Worsened metrics

Number of low supply chain risk alerts

5

increased by66.67%

No dependency changes