@contrast/distringuish-prebuilt - npm Package Compare versions

Comparing version 1.8.1 to 1.8.2

index.js

 const semver = require('semver');
 let distringuish;
-if (semver.lt(process.version, '12.0.0')) {
-  distringuish = require(`${__dirname}/${process.platform}.node`);
-} else {
-  distringuish = require(`${__dirname}/${process.platform}-12.node`);
+try {
+  distringuish = require('./build/Release/distringuish.node');
+} catch {
+  if (semver.lt(process.version, '12.0.0')) {
+    distringuish = require(`${__dirname}/${process.platform}-10/distringuish.node`);
+  } else {
+    distringuish = require(`${__dirname}/${process.platform}-12/distringuish.node`);
+  }
 }
 
-
 module.exports.externalize = (str) => {
@@ -11,0 +14,0 @@ if(typeof str === 'string')

package.json

 {
   "name": "@contrast/distringuish-prebuilt",
-  "version": "1.8.1",
+  "version": "1.8.2",
   "description": "Contrast Security",
@@ -10,3 +10,3 @@ "main": "index.js",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "mocha test/test.js"
   },
@@ -17,3 +17,9 @@ "author": "Contrast Security",
     "semver": "^6.3.0"
+  },
+  "devDependencies": {
+    "mocha": "^5.2.0",
+    "chai": "^4.2.0",
+    "node-gyp": "^4.0.0",
+    "nan": "^2.10.0"
   }
 }

New alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

725468

increased by0.21%

Lines of code

29

increased by16%

Number of low quality alerts

1

decreased by-50%

Worsened metrics

Dev dependency count

4

increased byInfinity%

No dependency changes