[Snyk] Upgrade eth-sig-util from 2.5.0 to 2.5.4

[kalbroni7]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade eth-sig-util from 2.5.0 to 2.5.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.

• The recommended version was released on 3 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Cryptographic Issues SNYK-JS-ELLIPTIC-571484	112	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	112	No Known Exploit
	Timing Attack SNYK-JS-ELLIPTIC-511941	112	No Known Exploit

Release notes

Package name: eth-sig-util

• 2.5.4 - 2021-02-04
  

  Changed

  • Update ethereumjs-abi (#121)
  • Remove unused dependencies (#120)
  • Update minimum tweetnacl to latest version (#124)
• 2.5.3 - 2020-03-16
  

  2.5.3

• 2.5.2 - 2019-11-30
  

  Version 2.5.2

• 2.5.1 - 2019-11-21
• 2.5.0 - 2019-10-21

from eth-sig-util GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@types/node@20.14.10	None	0	2.09 MB	types
npm/@types/pbkdf2@3.1.2	None	0	4.52 kB	types
npm/@types/secp256k1@4.0.6	None	0	8.05 kB	types
npm/base-x@3.0.10	None	0	9.36 kB	junderw
npm/blakejs@1.2.1	None	0	156 kB	dcposch
npm/bs58@4.0.1	None	0	4.57 kB	dcousens
npm/bs58check@2.1.2	None	0	4.79 kB	dcousens
npm/elliptic@6.5.5	None	+2	218 kB	indutny
npm/eth-sig-util@2.5.4	None	0	22.1 kB	gudahtt
npm/ethereum-cryptography@0.1.3	Transitive: environment	+3	3.64 MB	alcuadrado
npm/ethereumjs-abi@0.6.8	None	+1	200 kB	holgerd77
npm/node-addon-api@2.0.2	None	0	799 kB	nicknaso
npm/node-gyp-build@4.8.1	environment, filesystem	0	13.4 kB	mafintosh
npm/randombytes@2.1.0	None	0	6.36 kB	cwmma
npm/rlp@2.2.7	None	+1	162 kB	ralxz
npm/scrypt-js@3.0.1	None	0	226 kB	ricmoo
npm/setimmediate@1.0.5	None	0	8.56 kB	domenic
npm/tweetnacl@1.0.3	None	0	175 kB	dchest
npm/undici-types@5.26.5	None	0	73.1 kB	ethan_arrowood

🚮 Removed packages: npm/browserify-sha3@0.0.4, npm/elliptic@6.4.1, npm/eth-sig-util@2.5.0, npm/ethereumjs-abi@0.6.5, npm/js-sha3@0.6.1, npm/keccakjs@0.2.3, npm/randombytes@2.0.6, npm/rlp@2.2.1, npm/sha3@1.2.3, npm/tweetnacl@1.0.1

View full report↗︎