ssri - npm Package Versions

9.0.0 (2022-04-05)

⚠ BREAKING CHANGES

• this drops support for node 8, node 10, and non-LTS versions of node 12 and node 14

Dependencies

• @npmcli/template-oss@3.2.2 (#31) (a14b37a)

8.0.1 (2021-01-27)

Bug Fixes

• simplify regex for strict mode, add tests (76e2233)

8.0.0 (2020-02-18)

⚠ BREAKING CHANGES

• SRI values with ../ in the algorithm name now throw as invalid (which they always probably should have!)
• adds a new error that will be thrown. Empty SRIs are no longer considered valid for checking, only when using integrityStream to calculate the SRI value.

PR-URL: https://github.com/npm/ssri/pull/12 Credit: @claudiahdz

Features

• remove figgy-pudding (0e78fd7)

Bug Fixes

• harden SRI parsing against ../ funny business (4062735)
• IntegrityStream responds to mutating opts object mid-stream (4a963e5)
• throw null when sri is empty or bad (a6811cb), closes #12

7.1.0 (2019-10-24)

Bug Fixes

• Do not blow up if the opts object is mutated (806e8c8)

Features

• Add Integrity#merge method (0572c1d), closes #4

7.0.1 (2019-09-30)

7.0.0 (2019-09-18)

⚠ BREAKING CHANGES

• ssri no longer accepts a Promise option, and does not use, return, or rely on Bluebird promises.
• drop support for Node.js v6.

We knew this was coming, and the Stream changes are breaking anyway. May as well do this now.

• streams: this replaces the Node.js stream with a Minipass stream. See http://npm.im/minipass for documentation.

Bug Fixes

• return super.write() return value (55b055d)

• Use native promises only (6d13165)

• update tap, standard, standard-version, travis (2e54956)

• streams: replace transform streams with minipass (363995e)

<a name="6.0.1"></a>

6.0.1 (2018-08-27)

Bug Fixes

• opts: use figgy-pudding to specify consumed opts (cf86553)

<a name="6.0.0"></a>

6.0.0 (2018-04-09)

Bug Fixes

• docs: minor typo (b71ef17)

meta

• drop support for node@4 (d9bf359)

BREAKING CHANGES

• node@4 is no longer supported

<a name="5.3.0"></a>