@expo/image-utils - npm Package Compare versions

Comparing version 0.8.10 to 0.8.11

build/Download.js

@@ -8,9 +8,9 @@ "use strict";
 exports.downloadImage = downloadImage;
+const crypto_1 = require("crypto");
 const fs_1 = __importDefault(require("fs"));
 // @ts-ignore
 const jimp_compact_1 = __importDefault(require("jimp-compact"));
+const os_1 = __importDefault(require("os"));
 const path_1 = __importDefault(require("path"));
 const stream_1 = __importDefault(require("stream"));
-const temp_dir_1 = __importDefault(require("temp-dir"));
-const unique_string_1 = __importDefault(require("unique-string"));
 const util_1 = __importDefault(require("util"));
@@ -23,3 +23,3 @@ // cache downloaded images into memory
 function temporaryDirectory() {
-    const directory = path_1.default.join(temp_dir_1.default, (0, unique_string_1.default)());
+    const directory = path_1.default.join(os_1.default.tmpdir(), (0, crypto_1.randomBytes)(16).toString('hex'));
     fs_1.default.mkdirSync(directory, { recursive: true });
@@ -26,0 +26,0 @@ return directory;

package.json

 {
   "name": "@expo/image-utils",
-  "version": "0.8.10",
+  "version": "0.8.11",
   "description": "A package used by Expo CLI for processing images",
@@ -41,5 +41,3 @@ "main": "build/index.js",
     "resolve-global": "^1.0.0",
-    "semver": "^7.6.0",
-    "temp-dir": "~2.0.0",
-    "unique-string": "~2.0.0"
+    "semver": "^7.6.0"
   },
@@ -49,3 +47,3 @@ "devDependencies": {
     "@types/semver": "^7.0.0",
-    "expo-module-scripts": "^55.0.1",
+    "expo-module-scripts": "^55.0.2",
     "sharp-cli": "^5.2.0"
@@ -56,3 +54,3 @@ },
   },
-  "gitHead": "4728ba25fbd4d5835780306de78a83bd1628e271"
+  "gitHead": "7d7f6762fc6907c27a329953c682134a84410dea"
 }

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dependency count

8

-20%

Worsened metrics

Total package byte prevSize

81251

-0.04%

Dependency changes

• - Removed

  temp-dir@~2.0.0

• - Removed

  unique-string@~2.0.0

• - Removed

  crypto-random-string@2.0.0
  (transitive)

• - Removed

  temp-dir@2.0.0
  (transitive)

• - Removed

  unique-string@2.0.0
  (transitive)