ssri - npm Package Compare versions

Comparing version 5.0.0 to 5.1.0

CHANGELOG.md

@@ -5,2 +5,17 @@ # Change Log
 
+<a name="5.1.0"></a>
+# [5.1.0](https://github.com/zkat/ssri/compare/v5.0.0...v5.1.0) (2018-01-18)
+
+
+### Bug Fixes
+
+* **checkStream:** integrityStream now takes opts.integrity algos into account ([d262910](https://github.com/zkat/ssri/commit/d262910))
+
+
+### Features
+
+* **sha3:** do some guesswork about upcoming sha3 ([7fdd9df](https://github.com/zkat/ssri/commit/7fdd9df))
+
+
+
 <a name="5.0.0"></a>
@@ -7,0 +22,0 @@ # [5.0.0](https://github.com/zkat/ssri/compare/v4.1.6...v5.0.0) (2017-10-23)

index.js

@@ -240,3 +240,4 @@ 'use strict'
   // Calculating stream
-  const algorithms = opts.algorithms || [algorithm || 'sha512']
+  const algorithms = (opts.algorithms || ['sha512'])
+  .concat(algorithm ? [algorithm] : [])
   const hashes = algorithms.map(crypto.createHash)
@@ -329,3 +330,8 @@ let streamSize = 0
 const DEFAULT_PRIORITY = [
-  'md5', 'whirlpool', 'sha1', 'sha224', 'sha256', 'sha384', 'sha512'
+  'md5', 'whirlpool', 'sha1', 'sha224', 'sha256', 'sha384', 'sha512',
+  // TODO - it's unclear _which_ of these Node will actually use as its name
+  //        for the algorithm, so we guesswork it based on the OpenSSL names.
+  'sha3',
+  'sha3-256', 'sha3-384', 'sha3-512',
+  'sha3_256', 'sha3_384', 'sha3_512'
 ]
@@ -332,0 +338,0 @@ function getPrioritizedHash (algo1, algo2) {

package.json

 {
   "name": "ssri",
-  "version": "5.0.0",
+  "version": "5.1.0",
   "description": "Standard Subresource Integrity library --  parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
@@ -5,0 +5,0 @@ "main": "index.js",

No alert changes

Improved metrics

Total package byte prevSize

37182

increased by1.77%

Lines of code

319

increased by1.92%

No dependency changes