web3 - npm Package Compare versions

Comparing version 0.20.6 to 0.20.7

bower.json

@@ -11,3 +11,3 @@ {
   "dependencies": {
-    "bignumber.js": ">=2.0.0",
+    "bignumber.js": ">=2.0.0 <=5.0.0",
     "crypto-js": "~3.1.4"
@@ -14,0 +14,0 @@ },

gulpfile.js

@@ -28,3 +28,3 @@ #!/usr/bin/env node
     insert_global_vars: false, // jshint ignore:line
-    detectGlobals: false,
+    detectGlobals: true,
     bundleExternal: true
@@ -31,0 +31,0 @@ };

lib/utils/utils.js

@@ -179,3 +179,3 @@ /*
  */
-var fromAscii = function(str) {
+var fromAscii = function(str, num) {
     var hex = "";
@@ -188,3 +188,3 @@ for(var i = 0; i < str.length; i++) {
 
-    return "0x" + hex;
+    return "0x" + hex.padEnd(num,'0');
 };
@@ -191,0 +191,0 @@

lib/version.json

 {
-    "version": "0.20.6"
+    "version": "0.20.7"
 }

lib/web3.js

@@ -0,18 +1,24 @@
+/*!
+ * web3.js - Ethereum JavaScript API
+ *
+ * @license lgpl-3.0
+ * @see https://github.com/ethereum/web3.js
+*/
+
 /*
-    This file is part of web3.js.
-
-    web3.js is free software: you can redistribute it and/or modify
-    it under the terms of the GNU Lesser General Public License as published by
-    the Free Software Foundation, either version 3 of the License, or
-    (at your option) any later version.
-
-    web3.js is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU Lesser General Public License for more details.
-
-    You should have received a copy of the GNU Lesser General Public License
-    along with web3.js.  If not, see <http://www.gnu.org/licenses/>.
-*/
-/**
+ * This file is part of web3.js.
+ * 
+ * web3.js is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Lesser General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ * 
+ * web3.js is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Lesser General Public License for more details.
+ * 
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with web3.js.  If not, see <http://www.gnu.org/licenses/>.
+ *
  * @file web3.js
@@ -19,0 +25,0 @@ * @authors:

lib/web3/function.js

@@ -40,4 +40,4 @@ /*
     });
-    this._constant = json.constant;
-    this._payable = json.payable;
+    this._constant = (json.stateMutability === "view" || json.stateMutability === "pure" || json.constant);
+    this._payable = (json.stateMutability === "payable" || json.payable);
     this._name = utils.transformToFullName(json);
@@ -44,0 +44,0 @@ this._address = address;

lib/web3/httpprovider.js

@@ -37,3 +37,3 @@ /*
 
-var XHR2 = require('xhr2'); // jshint ignore: line
+var XHR2 = require('xhr2-cookies').XMLHttpRequest; // jshint ignore: line
 
@@ -67,2 +67,3 @@ /**
   }
+  request.withCredentials = true;
 
@@ -69,0 +70,0 @@ request.open('POST', this.host, async);

package.js

 /* jshint ignore:start */
 Package.describe({
   name: 'ethereum:web3',
-  version: '0.20.6',
+  version: '0.20.7',
   summary: 'Ethereum JavaScript API, middleware to talk to a ethreum node over RPC',
-  git: 'https://github.com/ethereum/ethereum.js',
+  git: 'https://github.com/ethereum/web3.js',
   // By default, Meteor will default to using README.md for documentation.
@@ -8,0 +8,0 @@ // To avoid submitting documentation, set this field to null.

package.json

 {
   "name": "web3",
   "namespace": "ethereum",
-  "version": "0.20.6",
+  "version": "0.20.7",
   "description": "Ethereum JavaScript API, middleware to talk to a ethereum node over RPC",
@@ -14,3 +14,3 @@ "main": "./index.js",
     "utf8": "^2.1.1",
-    "xhr2": "*",
+    "xhr2-cookies": "^1.1.0",
     "xmlhttprequest": "*"
@@ -88,4 +88,3 @@ },
   ],
-
   "license": "LGPL-3.0"
 }

README.md

@@ -49,2 +49,9 @@ # Migration 0.13.0 -> 0.14.0
 ### As Browser module
+
+CDN
+
+```html
+<script src="https://cdn.jsdelivr.net/gh/ethereum/web3.js/dist/web3.min.js"></script>
+```
+
 Bower
@@ -137,2 +144,3 @@
  - PHP [web3.php](https://github.com/sc0Vu/web3.php)
+ - PHP [ethereum-php](https://github.com/digitaldonkey/ethereum-php)
 
@@ -139,0 +147,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Wildcard dependency

Quality

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7931829

increased by27.9%

Number of package files

309

increased by0.98%

Lines of code

70369

increased by28.88%

Number of medium quality alerts

1

decreased by-50%

Number of lines in readme file

158

increased by5.33%

Worsened metrics

Number of low supply chain risk alerts

10

increased by25%

Number of medium supply chain risk alerts

6

increased by200%

Dependency changes

• + Addedxhr2-cookies@^1.1.0

• + Addedcookiejar@2.1.4(transitive)

• + Addedxhr2-cookies@1.1.0(transitive)

• - Removedxhr2@*

• - Removedxhr2@0.2.1(transitive)