Please refer to the releases page for the 7.x-9.x versions and CHANGELOG.md for the newer versions.
- Specified a custom
User-Agent
to explicitly identify ourselves to thehaveibeenpwned.com
API (9185536d)
- Added
-i
/--include-unverified
option toba
command to include "unverified" breaches in the results - Converted to TypeScript (#26)
- Updated dependencies (includes fix for
Forbidden
errors from[email protected]
)
- Made the progress spinner animation a little more fun and added status emojis (✔, ⚠, ✖) to some output (#11)
- Upgraded
hibp
to v7 which handles password hashing and suffix processing, removing this logic frompwned
. - The
pw
command now includes a count in the output, indicating how many times the given password was exposed in a breach.
- Dropped support for Node < 6
- Refactored
pw
command to be secure by default (#8). Passwords will no longer be sent over the network. Instead, the first 5 characters of the SHA-1 hash of the password will be sent, and the list of suffixes that match the submitted prefix will be returned.pwned
will then search the range of suffixes for the suffix from your hash. If a match is found, the password has been compromised in a breach.
- The
pw
command no longer takes the-s
(--sha1
) option. Instead, all passwords will be taken literally and hashed. This is due to a remote API endpoint change which no longer performs automatic hash detection.
- Updated
hibp
to avoid Chromium download when running withnpx
- Fixed
regeneratorRuntime is not defined
error 😱 - Reformated some documentation files
- Updated dependencies
- Internal maintenance
- Migrated from commander to yargs (#6) 💀
- Added command suggestions if no matching command is found
- Fixed displaying help on unknown command (#4)
- Replaced testing toolchain with jest (#5)
- Removed Babel plugins
- Updated dependencies
- Added new
pw
command to check if a password has been exposed in a data breach (#3) - Enabled
source-map-support
in the entry point for easier debugging
- Removed deprecated
preferGlobal
field from package.json - Updated dependencies
- Updated README to include
search
command
- Added new
search
command to query breaches and pastes simultaneously (like the search form on the website) - Optimized stub restores/resets in tests
- Updated dependencies
- First release of 2017! 🎉
- Removed leftover
es6-promise
dependency - Updated dependencies
- Dropped support for Node < 4
- Updated dependencies
- Switched code style from SemiStandard to Airbnb
- Improved/optimized tests
- Updated dependencies
- Updated examples in README to reflect 2.0.0 changes
-
Removed spinner output when command completes
This is technically a breaking change as the output for the same input will be different than in previous versions. Previously, the progress spinner was included in the output (unless using the
--raw
option) and now it isn't. So, if you were previously parsing the formatted (non-raw) output, you may need to adjust. -
Shortened error messages
In the event of a failed request to the remote API (network errors, etc.), an error message is written to
stderr
. Due to an upstream change in the underlying network request technology in thehibp
library, these messages will be significantly shorter as only the "reason" will be displayed now as opposed to a more verbose explanation of what went wrong. -
Added tests
-
Updated dependencies
- Normalized command behavior (suppress output for empty results in raw mode)
- Fixed usage output for unknown or missing commands
- Restructured project
- Updated dependencies
- Increased visibility in npm search
- Minor improvements to development environment
- Fixed grammar typo in usage information
- Updated dependencies
- Updated hibp to 1.0.4
- Skipped (to bring version in line with hibp dependency)
- Updated hibp to 1.0.3
- Updated hibp to 1.0.2
- Removed temporary hack for broken 'breach' endpoint (moved to hibp)
- Initial release