web3-providers-ws - npm Package Compare versions

Comparing version 1.0.0-beta.37 to 1.0.0

package.json

 {
     "name": "web3-providers-ws",
-    "namespace": "ethereum",
-    "version": "1.0.0-beta.37",
+    "version": "1.0.0",
     "description": "Module to handle web3 RPC connections over WebSockets.",
-    "repository": "https://github.com/ethereum/web3.js/tree/master/packages/web3-providers-ws",
+    "repository": "https://github.com/ethereum/web3.js/tree/1.x/packages/web3-providers-ws",
     "license": "LGPL-3.0",
+    "engines": {
+        "node": ">=8.0.0 <=11.15.0"
+    },
     "main": "src/index.js",
+    "scripts": {
+        "preinstall": "rm -rf node_modules/websocket/.git"
+    },
     "dependencies": {
-        "underscore": "1.8.3",
-        "web3-core-helpers": "1.0.0-beta.37",
-        "websocket": "git://github.com/frozeman/WebSocket-Node.git#browserifyCompatible"
+        "underscore": "1.9.1",
+        "web3-core-helpers": "1.0.0",
+        "websocket": "github:frozeman/WebSocket-Node#browserifyCompatible"
     }
 }

src/index.js

@@ -42,3 +42,3 @@ /*
     _btoa = function(str) {
-      return Buffer(str).toString('base64');
+      return Buffer.from(str).toString('base64');
     };
@@ -45,0 +45,0 @@ var url = require('url');

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12698

increased by0.68%

Number of low quality alerts

1

decreased by-50%

Worsened metrics

Number of high supply chain risk alerts

2

increased by100%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedbn.js@4.11.8(transitive)

• + Addedeth-lib@0.2.7(transitive)

• + Addedunderscore@1.9.1(transitive)

• + Addedutf8@3.0.0(transitive)

• + Addedweb3-core-helpers@1.0.0(transitive)

• + Addedweb3-eth-iban@1.0.0(transitive)

• + Addedweb3-utils@1.0.0(transitive)

• - Removedaccepts@1.3.8(transitive)

• - Removedajv@6.12.6(transitive)

• - Removedarray-flatten@1.1.1(transitive)

• - Removedasn1@0.2.6(transitive)

• - Removedassert-plus@1.0.0(transitive)

• - Removedasync-limiter@1.0.1(transitive)

• - Removedasynckit@0.4.0(transitive)

• - Removedaws-sign2@0.7.0(transitive)

• - Removedaws4@1.13.2(transitive)

• - Removedbcrypt-pbkdf@1.0.2(transitive)

• - Removedbody-parser@1.20.3(transitive)

• - Removedbrowserify-sha3@0.0.4(transitive)

• - Removedbytes@3.1.2(transitive)

• - Removedcall-bind@1.0.7(transitive)

• - Removedcaseless@0.12.0(transitive)

• - Removedcombined-stream@1.0.8(transitive)

• - Removedcontent-disposition@0.5.4(transitive)

• - Removedcontent-type@1.0.5(transitive)

• - Removedcookie@0.7.1(transitive)

• - Removedcookie-signature@1.0.6(transitive)

• - Removedcore-util-is@1.0.2(transitive)

• - Removedcors@2.8.5(transitive)

• - Removeddashdash@1.14.1(transitive)

• - Removeddebug@2.6.9(transitive)

• - Removeddefine-data-property@1.1.4(transitive)

• - Removeddelayed-stream@1.0.0(transitive)

• - Removeddepd@2.0.0(transitive)

• - Removeddestroy@1.2.0(transitive)

• - Removedecc-jsbn@0.1.2(transitive)

• - Removedee-first@1.1.1(transitive)

• - Removedencodeurl@1.0.22.0.0(transitive)

• - Removedes-define-property@1.0.0(transitive)

• - Removedes-errors@1.3.0(transitive)

• - Removedescape-html@1.0.3(transitive)

• - Removedetag@1.8.1(transitive)

• - Removedeth-lib@0.1.27(transitive)

• - Removedexpress@4.21.1(transitive)

• - Removedextend@3.0.2(transitive)

• - Removedextsprintf@1.3.0(transitive)

• - Removedfast-deep-equal@3.1.3(transitive)

• - Removedfast-json-stable-stringify@2.1.0(transitive)

• - Removedfinalhandler@1.3.1(transitive)

• - Removedforever-agent@0.6.1(transitive)

• - Removedform-data@2.3.3(transitive)

• - Removedforwarded@0.2.0(transitive)

• - Removedfresh@0.5.2(transitive)

• - Removedfunction-bind@1.1.2(transitive)

• - Removedget-intrinsic@1.2.4(transitive)

• - Removedgetpass@0.1.7(transitive)

• - Removedgopd@1.0.1(transitive)

• - Removedhar-schema@2.0.0(transitive)

• - Removedhar-validator@5.1.5(transitive)

• - Removedhas-property-descriptors@1.0.2(transitive)

• - Removedhas-proto@1.0.3(transitive)

• - Removedhas-symbols@1.0.3(transitive)

• - Removedhasown@2.0.2(transitive)

• - Removedhttp-errors@2.0.0(transitive)

• - Removedhttp-signature@1.2.0(transitive)

• - Removediconv-lite@0.4.24(transitive)

• - Removedipaddr.js@1.9.1(transitive)

• - Removedis-typedarray@1.0.0(transitive)

• - Removedisstream@0.1.2(transitive)

• - Removedjs-sha3@0.6.1(transitive)

• - Removedjsbn@0.1.1(transitive)

• - Removedjson-schema@0.4.0(transitive)

• - Removedjson-schema-traverse@0.4.1(transitive)

• - Removedjson-stringify-safe@5.0.1(transitive)

• - Removedjsprim@1.4.2(transitive)

• - Removedkeccakjs@0.2.3(transitive)

• - Removedmedia-typer@0.3.0(transitive)

• - Removedmerge-descriptors@1.0.3(transitive)

• - Removedmethods@1.1.2(transitive)

• - Removedmime@1.6.0(transitive)

• - Removedmime-db@1.52.0(transitive)

• - Removedmime-types@2.1.35(transitive)

• - Removedms@2.0.02.1.3(transitive)

• - Removednan@2.13.2(transitive)

• - Removednano-json-stream-parser@0.1.2(transitive)

• - Removednegotiator@0.6.3(transitive)

• - Removedoauth-sign@0.9.0(transitive)

• - Removedobject-inspect@1.13.3(transitive)

• - Removedon-finished@2.4.1(transitive)

• - Removedparseurl@1.3.3(transitive)

• - Removedpath-to-regexp@0.1.10(transitive)

• - Removedperformance-now@2.1.0(transitive)

• - Removedproxy-addr@2.0.7(transitive)

• - Removedpsl@1.10.0(transitive)

• - Removedpunycode@2.3.1(transitive)

• - Removedqs@6.13.06.5.3(transitive)

• - Removedrange-parser@1.2.1(transitive)

• - Removedraw-body@2.5.2(transitive)

• - Removedrequest@2.88.2(transitive)

• - Removedsafe-buffer@5.1.25.2.1(transitive)

• - Removedsafer-buffer@2.1.2(transitive)

• - Removedsend@0.19.0(transitive)

• - Removedserve-static@1.16.2(transitive)

• - Removedservify@0.1.12(transitive)

• - Removedset-function-length@1.2.2(transitive)

• - Removedsetprototypeof@1.2.0(transitive)

• - Removedsha3@1.2.6(transitive)

• - Removedside-channel@1.0.6(transitive)

• - Removedsshpk@1.18.0(transitive)

• - Removedstatuses@2.0.1(transitive)

• - Removedtoidentifier@1.0.1(transitive)

• - Removedtough-cookie@2.5.0(transitive)

• - Removedtunnel-agent@0.6.0(transitive)

• - Removedtweetnacl@0.14.5(transitive)

• - Removedtype-is@1.6.18(transitive)

• - Removedultron@1.1.1(transitive)

• - Removedunderscore@1.8.3(transitive)

• - Removedunpipe@1.0.0(transitive)

• - Removeduri-js@4.4.1(transitive)

• - Removedutf8@2.1.1(transitive)

• - Removedutils-merge@1.0.1(transitive)

• - Removeduuid@3.4.0(transitive)

• - Removedvary@1.1.2(transitive)

• - Removedverror@1.10.0(transitive)

• - Removedweb3-core-helpers@1.0.0-beta.37(transitive)

• - Removedweb3-eth-iban@1.0.0-beta.37(transitive)

• - Removedweb3-utils@1.0.0-beta.37(transitive)

• - Removedws@3.3.3(transitive)

• Updatedunderscore@1.9.1

• Updatedweb3-core-helpers@1.0.0

• Updatedwebsocket@github:frozeman/WebSocket-Node#browserifyCompatible