@contrast/distringuish-prebuilt - npm Package Compare versions

Comparing version 1.7.1 to 1.8.0

index.js

@@ -1,3 +0,10 @@
-const distringuish = require(`${__dirname}/${process.platform}.node`);
+const semver = require('semver');
+let distringuish;
+if (semver.lt(process.version, '12.0.0')) {
+  distringuish = require(`${__dirname}/${process.platform}.node`);
+} else {
+  distringuish = require(`${__dirname}/${process.platform}-12.node`);
+}
 
+
 module.exports.externalize = (str) => {
@@ -4,0 +11,0 @@ if(typeof str === 'string')

package.json

 {
   "name": "@contrast/distringuish-prebuilt",
-  "version": "1.7.1",
+  "version": "1.8.0",
   "description": "Contrast Security",
@@ -13,3 +13,6 @@ "main": "index.js",
   "author": "Contrast Security",
-  "license": "UNLICENSED"
+  "license": "UNLICENSED",
+  "dependencies": {
+    "semver": "^6.3.0"
+  }
 }

New alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

731258

increased by421.05%

Number of package files

8

increased by60%

Lines of code

25

increased by31.58%

Worsened metrics

Dependency count

1

increased byInfinity%

Number of low supply chain risk alerts

3

increased by50%

Number of medium supply chain risk alerts

5

increased by66.67%

Dependency changes

• + Addedsemver@^6.3.0

• + Addedsemver@6.3.1(transitive)