Merge pull request #81 from auth0/IPS-2349

fix!: remove vulnerable node-forge dependency
auth0 · Feb 4, 2022 · 6921071 · 6921071
2 parents d281fdd + 0106c61
commit 6921071
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -4,6 +4,10 @@ Create SAML assertions. Supports SAML 1.1 and SAML 2.0 tokens.
 
 [![Build Status](https://travis-ci.org/auth0/node-saml.png)](https://travis-ci.org/auth0/node-saml)
 
+### Supported Node Versions
+
+node >= 12
+
 ### Usage
 
 ```js

diff --git a/package.json b/package.json
@@ -1,6 +1,9 @@
 {
   "name": "saml",
   "version": "1.0.1",
+  "engines": {
+    "node": ">=12"
+  },
   "devDependencies": {
     "@commitlint/cli": "^11.0.0",
     "@commitlint/config-conventional": "^11.0.0",
@@ -24,7 +27,7 @@
     "moment": "2.19.3",
     "valid-url": "~1.0.9",
     "xml-crypto": "^2.1.3",
-    "xml-encryption": "^1.2.1",
+    "xml-encryption": "^2.0.0",
     "xml-name-validator": "~2.0.1",
     "xpath": "0.0.5"
   },