@file-cache/core - npm Package Compare versions

Comparing version 1.1.2 to 1.1.3

package.json

 {
   "name": "@file-cache/core",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "A cache for file metadata or file content.",
@@ -5,0 +5,0 @@ "keywords": [

src/index.ts

@@ -38,4 +38,2 @@ import path from "node:path";
 };
-// FIXME: https://github.com/milesj/packemon/issues/138
-const _importDynamic = new Function("modulePath", "return import(modulePath)");
 export type DeleteCacheOptions = Omit<CreateCacheOptions, "noCache">;
@@ -48,3 +46,3 @@ /**
 export const deleteCacheFile = async (options: DeleteCacheOptions) => {
-    const { packageDirectory } = await _importDynamic("pkg-dir");
+    const { packageDirectory } = await import("pkg-dir");
     const pkgDir = await packageDirectory();
@@ -83,3 +81,3 @@ const pkgName = await getPackageName(pkgDir);
     }
-    const { packageDirectory } = await _importDynamic("pkg-dir");
+    const { packageDirectory } = await import("pkg-dir");
     const pkgDir = await packageDirectory();
@@ -86,0 +84,0 @@ const pkgName = await getPackageName(pkgDir);

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

48594

decreased by-1.56%

Lines of code

917

decreased by-0.43%

No dependency changes