8.0.1 (2021-01-27)

Bug Fixes

• simplify regex for strict mode, add tests (76e2233)

8.0.0 (2020-02-18)

⚠ BREAKING CHANGES

• SRI values with ../ in the algorithm name now throw as invalid (which they always probably should have!)
• adds a new error that will be thrown. Empty SRIs are no longer considered valid for checking, only when using integrityStream to calculate the SRI value.

PR-URL: https://github.com/npm/ssri/pull/12 Credit: @claudiahdz

Features

• remove figgy-pudding (0e78fd7)

Bug Fixes

• harden SRI parsing against ../ funny business (4062735)
• IntegrityStream responds to mutating opts object mid-stream (4a963e5)
• throw null when sri is empty or bad (a6811cb), closes #12

7.1.0 (2019-10-24)

Bug Fixes

• Do not blow up if the opts object is mutated (806e8c8)

Features

• Add Integrity#merge method (0572c1d), closes #4

7.0.1 (2019-09-30)

7.0.0 (2019-09-18)

⚠ BREAKING CHANGES

• ssri no longer accepts a Promise option, and does not use, return, or rely on Bluebird promises.
• drop support for Node.js v6.

We knew this was coming, and the Stream changes are breaking anyway. May as well do this now.

• streams: this replaces the Node.js stream with a Minipass stream. See http://npm.im/minipass for documentation.

Bug Fixes

• return super.write() return value (55b055d)

• Use native promises only (6d13165)

• update tap, standard, standard-version, travis (2e54956)

• streams: replace transform streams with minipass (363995e)

<a name="6.0.1"></a>

6.0.1 (2018-08-27)

Bug Fixes

• opts: use figgy-pudding to specify consumed opts (cf86553)

<a name="6.0.0"></a>

6.0.0 (2018-04-09)

Bug Fixes

• docs: minor typo (b71ef17)

meta

• drop support for node@4 (d9bf359)

BREAKING CHANGES

• node@4 is no longer supported

<a name="5.3.0"></a>

5.3.0 (2018-03-13)

Features

• checkData: optionally throw when checkData fails (bf26b84)

<a name="5.2.4"></a>

5.2.4 (2018-02-16)

<a name="5.2.3"></a>

5.2.3 (2018-02-16)

Bug Fixes

• hashes: filter hash priority list by available hashes (2fa30b8)
• integrityStream: dedupe algorithms to generate (d56c654)

<a name="5.2.2"></a>