sodium-native - npm Package Compare versions

Comparing version 3.4.1 to 4.0.0

deps/bin.js

@@ -13,7 +13,7 @@ #!/usr/bin/env node
 const VERSION = '1.0.18'
-const VS = 'v141'
+const VS = 'v142'
 const MACOSX_DEPLOYMENT_TARGET = '10.10'
 
-const UNIX = `https://download.libsodium.org/libsodium/releases/libsodium-${VERSION}.tar.gz`
-const WIN = `https://download.libsodium.org/libsodium/releases/libsodium-${VERSION}-msvc.zip`
+const UNIX = `https://download.libsodium.org/libsodium/releases/libsodium-${VERSION}-stable.tar.gz`
+const WIN = `https://download.libsodium.org/libsodium/releases/libsodium-${VERSION}-stable-msvc.zip`
 
@@ -116,3 +116,3 @@ const UNIX_OUT = path.join(__dirname, 'unix')
 
-  await run(['./configure', '--prefix=' + TMP_OUT, '--enable-static', '--with-pic', '--disable-pie'], { cwd: SRC })
+  await run(['./configure', '--prefix=' + TMP_OUT, '--disable-pie'], { cwd: SRC })
   await run(['make', 'clean'], { cwd: SRC })
@@ -134,3 +134,3 @@ await run(['make', 'install'], { cwd: SRC })
   await rmf(SRC)
-  await fs.rename(path.join(TMP_SRC, 'libsodium-' + VERSION), SRC)
+  await fs.rename(path.join(TMP_SRC, 'libsodium-stable'), SRC)
 }
@@ -137,0 +137,0 @@

index.js

@@ -1,3 +0,1 @@
-var sodium = require('node-gyp-build')(__dirname)
-
-module.exports = sodium
+module.exports = require('node-gyp-build')(__dirname)

package.json

 {
   "name": "sodium-native",
-  "version": "3.4.1",
+  "version": "4.0.0",
   "description": "Low level bindings for libsodium",
   "main": "index.js",
+  "files": [
+    "index.js",
+    "deps/**",
+    "modules/**",
+    "binding.c",
+    "binding.gyp",
+    "macros.h",
+    "prebuilds/**"
+  ],
   "dependencies": {
@@ -24,2 +33,7 @@ "node-gyp-build": "^4.3.0"
   },
+  "standard": {
+    "ignore": [
+      "/test/fixtures/*.js"
+    ]
+  },
   "repository": {
@@ -26,0 +40,0 @@ "type": "git",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

4587684

increased by36.03%

Number of low supply chain risk alerts

4

decreased by-33.33%

Worsened metrics

Number of package files

18

decreased by-64.71%

Lines of code

183

decreased by-93.39%

Number of medium supply chain risk alerts

8

increased by14.29%

No dependency changes