@instana/core - npm Package Compare versions

Comparing version 1.85.0 to 1.86.0

package.json

 {
   "name": "@instana/core",
-  "version": "1.85.0",
+  "version": "1.86.0",
   "description": "Core library for Instana's Node.js packages",
@@ -122,2 +122,3 @@ "main": "src/index.js",
     "emitter-listener": "^1.1.2",
+    "lru-cache": "^5.1.1",
     "methods": "^1.1.2",
@@ -136,3 +137,3 @@ "opentracing": "^0.14.3",
   },
-  "gitHead": "5cb8bf747d09e82c84fe5f63ca817255d7477119"
+  "gitHead": "09fa6a339c6a213f102fc96fe78e6432a62078d3"
 }

src/tracing/index.js

@@ -30,2 +30,3 @@ 'use strict';
   './instrumentation/database/pg',
+  './instrumentation/database/pgNative',
   './instrumentation/database/redis',
@@ -32,0 +33,0 @@ './instrumentation/frameworks/awsSdk',

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Lines of code

7825

increased by3.23%

Worsened metrics

Total package byte prevSize

283202

decreased by-3.74%

Dependency count

9

increased by12.5%

Number of low supply chain risk alerts

23

increased by9.52%

Dependency changes

• + Addedlru-cache@^5.1.1

• + Addedlru-cache@5.1.1(transitive)

• + Addedyallist@3.1.1(transitive)