socketio-jwt - npm Package Compare versions

Comparing version 3.0.0 to 4.0.0

package.json

 {
   "name": "socketio-jwt",
-  "version": "3.0.0",
+  "version": "4.0.0",
   "description": "authenticate socket.io connections using JWTs",
@@ -25,3 +25,3 @@ "main": "lib/index.js",
   "dependencies": {
-    "jsonwebtoken": "~4.2.0",
+    "jsonwebtoken": "^5.0.0",
     "xtend": "~2.1.2"
@@ -28,0 +28,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20788

increased by26.09%

Number of package files

14

increased by16.67%

Worsened metrics

Number of medium supply chain risk alerts

3

increased by50%

Dependency changes

• + Addedjsonwebtoken@5.7.0(transitive)

• + Addedjwa@1.4.1(transitive)

• + Addedjws@3.2.2(transitive)

• + Addedms@0.7.3(transitive)

• + Addedxtend@4.0.2(transitive)

• - Removedbase64url@0.0.61.0.6(transitive)

• - Removedcamelcase@1.2.1(transitive)

• - Removedcamelcase-keys@1.0.0(transitive)

• - Removedconcat-stream@1.4.11(transitive)

• - Removedcore-util-is@1.0.3(transitive)

• - Removedget-stdin@4.0.1(transitive)

• - Removedindent-string@1.2.2(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedis-finite@1.1.0(transitive)

• - Removedisarray@0.0.1(transitive)

• - Removedjsonwebtoken@4.2.2(transitive)

• - Removedjwa@1.0.2(transitive)

• - Removedjws@2.0.0(transitive)

• - Removedmap-obj@1.0.1(transitive)

• - Removedmeow@2.0.0(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedobject-assign@1.0.0(transitive)

• - Removedreadable-stream@1.1.14(transitive)

• - Removedrepeating@1.1.3(transitive)

• - Removedstring_decoder@0.10.31(transitive)

• - Removedtypedarray@0.0.7(transitive)

• Updatedjsonwebtoken@^5.0.0