.github/workflows/nodejs-ci.yml

@@ -8,17 +8,18 @@ on:
 
 jobs:
   build:
+    name: Node CI - test
     runs-on: ubuntu-latest
 
     strategy:
       matrix:
-        node-version: [12.x, 14.x, 16.x]
+        node-version: [18.x, 20.x]
 
     steps:
       - name: Repository checkout
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v2.1.5
+        uses: actions/setup-node@v3.8.1
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install latest npm
@@ -32,5 +33,4 @@ jobs:
       - name: Run tests
         run: npm run test:coverage
       - name: Code coverage
-        if: ${{ matrix.node-version == '14.x' }}
         uses: codecov/codecov-action@v1

.github/workflows/npm-publish.yml

@@ -9,21 +9,21 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v3.8.1
         with:
-          node-version: 12
+          node-version: 20
       - run: npm install
       - run: npm run test
 
   publish-npm:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v3.8.1
         with:
-          node-version: 12
+          node-version: 20
           registry-url: https://registry.npmjs.org/
       - run: npm install
       - run: npm publish --access public

LICENSE

@@ -1,7 +1,7 @@
 MIT License
 
 Copyright (c) 2021 Lukas Hroch
-Copyright (c) 2022 Duo Security
+Copyright (c) 2022 Cisco Systems, Inc. and/or its affiliates
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -12,7 +12,7 @@ Duo especially thanks [Lukas Hroch](https://github.com/lukashroch) for creating
 
 ## Getting Started
 
-This library requires Node.js v12 or later.
+This library requires Node.js v14 or later.
 
 To use this client in your existing developing environment, install it from NPM
 
@@ -22,6 +22,10 @@ npm install @duosecurity/duo_universal
 
 Once it's installed, see our developer documentation at https://duo.com/docs/duoweb and the `example` folder in this repo for guidance on integrating Duo 2FA into your web application.
 
+### TLS 1.2 and 1.3 Support
+
+Duo_universal_nodejs uses the Node tls library and OpenSSL for TLS operations. All versions of Node receiving security support (14 and higher) use OpenSSL 1.1.1 which supports TLS 1.2 and 1.3.
+
 ## Usage Details
 
 ### 1. Import client

SECURITY.md

@@ -0,0 +1,8 @@
+Duo is committed to providing secure software to all our customers and users.  We take all security concerns seriously and ask that any disclosures be handled responsibly.
+
+# Security Policy
+
+## Reporting a Vulnerability
+**Please do not use Github issues or pull requests to report security vulnerabilities.**
+
+If you believe you have found a security vulnerability in Duo software, please follow our response process described at https://duo.com/support/security-and-reliability/security-response.