socket-security[bot]
commented
3 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@noble/ciphers@0.5.3 | None | 0 |
624 kB | paulmillr |
| npm/@noble/curves@1.4.0 | None | 0 |
1.39 MB | paulmillr |
| npm/@noble/hashes@1.4.0 | None | 0 |
773 kB | paulmillr |
| npm/bs58check@3.0.1 | None | 0 |
5.11 kB | junderw |
| npm/crypto@1.0.1 | None | 0 |
778 B | ehsalazar |
| npm/jest@29.7.0 | Transitive: environment, eval, filesystem, network, shell, unsafe | +272 |
25.5 MB | simenb |
| npm/react-native-get-random-values@1.11.0 | None | +1 |
22.5 kB | linusu |
| npm/react-native-quick-base64@2.1.2 | None | +1 |
2.12 MB | craftzdog |
| npm/react-native@0.74.1 | environment, network Transitive: eval, filesystem, shell, unsafe | +509 |
186 MB | react-native-bot |
| npm/typescript@5.0.4 | None | 0 |
39.2 MB | typescript-bot |
codesandbox-ci[bot]
Summary & Motivation
This package will serve as the primitives associated with decryption, encryption and keygen. The goal here was originally to make email auth available in a much simpler way for rn clients, but this actually is just a purjs implementation for any runtime for (primarily) hpke decryption. Currently there are some hardcoded values that are tk specific but a fast-follow is generalizing this for anyone to use.
How I Tested These Changes
Did you add a changeset?
If updating one of our packages, you'll likely need to add a changeset to your PR. To do so, run
pnpm changeset.pnpm changesetwill generate a file where you should write a human friendly message about the changes. Note how this (example) includes the package name (should be auto added by the command) along with the type of semver change (major.minor.patch) (which you should set).These changes will be used at release time to determine what packages to publish and how to bump their version. For more context see this comment.