saml - npm Package Compare versions

Comparing version 3.0.0 to 3.0.1

CHANGELOG.md

@@ -5,2 +5,9 @@ # Changelog
 
+### [3.0.1](https://github.com/auth0/node-saml/compare/v3.0.0...v3.0.1) (2022-08-26)
+
+
+### Bug Fixes
+
+* update async and moment dependencies to fix reported CVEs ([663a73e](https://github.com/auth0/node-saml/commit/663a73ef4f933c5b264ab0ba3b69fd35039eab64))
+
 ## [3.0.0](https://github.com/auth0/node-saml/compare/v2.0.1...v3.0.0) (2022-05-12)
@@ -7,0 +14,0 @@

package.json

 {
   "name": "saml",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "engines": {
@@ -26,4 +26,4 @@ "node": ">=12"
     "@xmldom/xmldom": "^0.7.4",
-    "async": "~0.2.9",
-    "moment": "2.19.3",
+    "async": "^3.2.4",
+    "moment": "^2.29.4",
     "valid-url": "~1.0.9",
@@ -30,0 +30,0 @@ "xml-crypto": "^2.1.3",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

114288

decreased by-1.18%

Number of package files

27

decreased by-30.77%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedasync@3.2.6(transitive)

• + Addedmoment@2.30.1(transitive)

• - Removedasync@0.2.10(transitive)

• - Removedmoment@2.19.3(transitive)

• Updatedasync@^3.2.4

• Updatedmoment@^2.29.4