samlify - npm Package Compare versions

Comparing version 2.1.0 to 2.1.1

build/src/libsaml.js

@@ -373,2 +373,3 @@ "use strict";
                     var x509Certificate = xpath_1.select("//*[local-name(.)='X509Certificate']", s)[0].firstChild.data;
+                    x509Certificate = utility_1.default.normalizeCerString(x509Certificate);
                     if (lodash_1.includes(metadataCert, x509Certificate)) {
@@ -375,0 +376,0 @@ selectedCert = x509Certificate;

package.json

 {
   "name": "samlify",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "High-level API for Single Sign On (SAML 2.0)",
@@ -5,0 +5,0 @@ "main": "build/index.js",

src/libsaml.ts

@@ -475,3 +475,4 @@ /**
           metadataCert = metadataCert.map(utility.normalizeCerString);
-          const x509Certificate = select("//*[local-name(.)='X509Certificate']", s)[0].firstChild.data;
+          let x509Certificate = select("//*[local-name(.)='X509Certificate']", s)[0].firstChild.data;
+          x509Certificate = utility.normalizeCerString(x509Certificate);
           if (includes(metadataCert, x509Certificate)) {
@@ -478,0 +479,0 @@ selectedCert = x509Certificate;

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

5167736

decreased by-0.06%

Lines of code

5172

decreased by-0.06%

No dependency changes