@existdb/node-exist - npm Package Compare versions

Comparing version 5.5.2 to 6.0.0

components/util.js

@@ -1,3 +0,16 @@
-const mime = require('mime')
+const Mime = require('mime/lite').Mime
 
+// load standard and other mime types
+const standardTypes = require('mime/types/standard.js').default
+const otherTypes = require('mime/types/other.js').default
+
+// define eXist-db specific mime types
+const customTypes = {
+  'application/xquery': ['xq', 'xqs', 'xquery', 'xql', 'xqm'],
+  'application/xml': ['xconf', 'odd']
+}
+
+// create custom mime instance
+const mime = new Mime(standardTypes, otherTypes, customTypes)
+
 /**
@@ -14,3 +27,4 @@ * determine mimetype from path, allowing override
 module.exports = {
-  getMimeType
+  getMimeType,
+  mime
 }

index.js

@@ -17,3 +17,3 @@ /**
 
-const mime = require('mime')
+const mime = require('./components/util').mime
 
@@ -32,8 +32,2 @@ // components
 
-// exist specific mime types
-mime.define({
-  'application/xquery': ['xq', 'xqs', 'xquery', 'xql', 'xqm'],
-  'application/xml': ['xconf', 'odd']
-})
-
 // helper functions
@@ -40,0 +34,0 @@

package.json

@@ -5,4 +5,8 @@ {
   "main": "index.js",
+  "engines": {
+    "node": "^20.19.0 || >=22.11.0"
+  },
   "scripts": {
     "test": "standard && tape spec/tests/*.js --no-only",
+    "test-dev": "standard && tape spec/tests/documents.js",
     "lint": "standard --fix",
@@ -42,18 +46,18 @@ "semantic-release": "semantic-release"
   "devDependencies": {
-    "@semantic-release/github": "^8.0.2",
+    "@semantic-release/github": "^12.0.2",
     "bottleneck": "^2.19.5",
-    "fast-glob": "^3.2.11",
-    "semantic-release": "^20.0.2",
-    "semver": "^7.3.8",
-    "standard": "^17.0.0",
-    "tape": "^5.0.1",
+    "fast-glob": "^3.3.3",
+    "semantic-release": "^25.0.2",
+    "semver": "^7.7.3",
+    "standard": "^17.1.2",
+    "tape": "^5.9.0",
     "yargs": "^17.3.1"
   },
   "dependencies": {
-    "got": "^12.1.0",
-    "lodash.assign": "^4.0.2",
-    "mime": "^3.0.0",
-    "xmlrpc": "^1.3.1"
+    "got": "^14.6.6",
+    "lodash.assign": "^4.2.0",
+    "mime": "^4.1.0",
+    "xmlrpc": "^1.3.2"
   },
-  "version": "5.5.2"
+  "version": "6.0.0"
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

51304

0.83%

Lines of code

846

0.71%

Dependency changes

• + Added

  @keyv/serialize@1.1.1
  (transitive)

• + Added

  @sec-ant/readable-stream@0.4.1
  (transitive)

• + Added

  @sindresorhus/is@7.2.0
  (transitive)

• + Added

  byte-counter@0.1.0
  (transitive)

• + Added

  cacheable-request@13.0.19
  (transitive)

• + Added

  decompress-response@10.0.0
  (transitive)

• + Added

  form-data-encoder@4.1.0
  (transitive)

• + Added

  get-stream@9.0.1
  (transitive)

• + Added

  got@14.6.6
  (transitive)

• + Added

  is-stream@4.0.1
  (transitive)

• + Added

  keyv@5.6.0
  (transitive)

• + Added

  mime@4.1.0
  (transitive)

• + Added

  p-cancelable@4.0.1
  (transitive)

• + Added

  responselike@4.0.2
  (transitive)

• + Added

  type-fest@4.41.0
  (transitive)

• - Removed

  @sindresorhus/is@5.6.0
  (transitive)

• - Removed

  @szmarczak/http-timer@5.0.1
  (transitive)

• - Removed

  cacheable-request@10.2.14
  (transitive)

• - Removed

  decompress-response@6.0.0
  (transitive)

• - Removed

  defer-to-connect@2.0.1
  (transitive)

• - Removed

  form-data-encoder@2.1.4
  (transitive)

• - Removed

  get-stream@6.0.1
  (transitive)

• - Removed

  got@12.6.1
  (transitive)

• - Removed

  json-buffer@3.0.1
  (transitive)

• - Removed

  keyv@4.5.4
  (transitive)

• - Removed

  mime@3.0.0
  (transitive)

• - Removed

  mimic-response@3.1.0
  (transitive)

• - Removed

  p-cancelable@3.0.0
  (transitive)

• - Removed

  responselike@3.0.0
  (transitive)

• Updated

  got@^14.6.6

• Updated

  lodash.assign@^4.2.0

• Updated

  mime@^4.1.0

• Updated

  xmlrpc@^1.3.2