ssri - npm Package Compare versions

Comparing version 9.0.1 to 10.0.0

lib/index.js

@@ -273,2 +273,5 @@ 'use strict'
     const other = parse(integrity, opts)
+    if (!other) {
+      return false
+    }
     const algo = other.pickAlgorithm(opts)
@@ -275,0 +278,0 @@ return (

package.json

 {
   "name": "ssri",
-  "version": "9.0.1",
+  "version": "10.0.0",
   "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
@@ -13,3 +13,2 @@ "main": "lib/index.js",
     "postrelease": "npm publish",
-    "prepublishOnly": "git push origin --follow-tags",
     "posttest": "npm run lint",
@@ -22,8 +21,10 @@ "test": "tap",
     "lintfix": "npm run lint -- --fix",
-    "preversion": "npm test",
-    "postversion": "npm publish",
     "snap": "tap"
   },
   "tap": {
-    "check-coverage": true
+    "check-coverage": true,
+    "nyc-arg": [
+      "--exclude",
+      "tap-snapshots/**"
+    ]
   },
@@ -55,12 +56,12 @@ "repository": {
     "@npmcli/eslint-config": "^3.0.1",
-    "@npmcli/template-oss": "3.5.0",
+    "@npmcli/template-oss": "4.5.1",
     "tap": "^16.0.1"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
+    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "3.5.0"
+    "version": "4.5.1"
   }
 }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Lines of code

475

increased by0.64%

Worsened metrics

Total package byte prevSize

37504

decreased by-0.02%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes