@jimdo/md5-loader - npm Package Compare versions

Comparing version 0.0.1 to 0.1.0

index.js

@@ -7,5 +7,3 @@ /*
 var path = require('path');
-var crypto = require('crypto');
-var tar = require('tar');
-var fstream = require('fstream');
+var hash = require('lucy-dirsum');
 
@@ -21,18 +19,11 @@ module.exports = function(content) {
 
-    var md5sum = crypto.createHash('md5');
-
-    var tarStream = fstream
-        .Reader(hashTarget)
-        .pipe(tar.Pack());
-
-    tarStream.on('data', function(d) {
-        md5sum.update(d);
-    }).on('end', function() {
-        var hashDigest = md5sum.digest('hex');
+    hash(hashTarget, function (err, hashDigest){
+        if (err) {
+            console.warn('md5 loader failed on path %s', hashTarget);
+            callback(err, '');
+            return;
+        }
         console.log('%s - md5 loader calculated hash of %s', hashDigest, hashTarget);
         callback(null, 'module.exports = "' + hashDigest + '";');
-    }).on('error', function(err) {
-        console.warn('md5 loader failed on path %s', hashTarget);
-        callback(err, '');
     });
 }

package.json

 {
   "name": "@jimdo/md5-loader",
-  "version": "0.0.1",
+  "version": "0.1.0",
   "description": "returns md5 hash of a specified path",
@@ -12,6 +12,5 @@ "main": "index.js",
   "dependencies": {
-    "fstream": "1.0.10",
     "loader-utils": "0.2.15",
-    "tar": "2.2.1"
+    "lucy-dirsum": "0.1.1"
   }
 }

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dependency count

2

decreased by-33.33%

Number of low supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

1244

decreased by-18%

Lines of code

24

decreased by-22.58%

Dependency changes

• + Addedlucy-dirsum@0.1.1

• + Addedlucy-dirsum@0.1.1(transitive)

• - Removedfstream@1.0.10

• - Removedtar@2.2.1

• - Removedbalanced-match@1.0.2(transitive)

• - Removedblock-stream@0.0.9(transitive)

• - Removedbrace-expansion@1.1.11(transitive)

• - Removedconcat-map@0.0.1(transitive)

• - Removedfs.realpath@1.0.0(transitive)

• - Removedfstream@1.0.10(transitive)

• - Removedglob@7.2.3(transitive)

• - Removedgraceful-fs@4.2.11(transitive)

• - Removedinflight@1.0.6(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedminimatch@3.1.2(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedmkdirp@0.5.6(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedpath-is-absolute@1.0.1(transitive)

• - Removedrimraf@2.7.1(transitive)

• - Removedtar@2.2.1(transitive)

• - Removedwrappy@1.0.2(transitive)