@mapbox/node-pre-gyp - npm Package Compare versions

Comparing version 1.0.6 to 1.0.7

CHANGELOG.md

 # node-pre-gyp changelog
 
+## 1.0.7
+- Upgraded nyc and npmlog to address https://github.com/advisories/GHSA-93q8-gq69-wqmw
+
 ## 1.0.6
@@ -4,0 +7,0 @@ - Added node v17 to the internal node releases listing

lib/util/abi_crosswalk.json

@@ -2582,6 +2582,22 @@ {
   },
+  "16.12.0": {
+    "node_abi": 93,
+    "v8": "9.4"
+  },
+  "16.13.0": {
+    "node_abi": 93,
+    "v8": "9.4"
+  },
   "17.0.0": {
     "node_abi": 102,
     "v8": "9.5"
+  },
+  "17.0.1": {
+    "node_abi": 102,
+    "v8": "9.5"
+  },
+  "17.1.0": {
+    "node_abi": 102,
+    "v8": "9.5"
   }
 }

package.json

 {
   "name": "@mapbox/node-pre-gyp",
   "description": "Node.js native addon binary install tool",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "keywords": [
@@ -28,3 +28,3 @@ "native",
     "nopt": "^5.0.0",
-    "npmlog": "^5.0.1",
+    "npmlog": "^6.0.0",
     "rimraf": "^3.0.2",
@@ -31,0 +31,0 @@ "semver": "^7.3.5",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

166162

increased by0.19%

Lines of code

4530

increased by0.35%

Number of medium supply chain risk alerts

4

decreased by-20%

Dependency changes

• + Addedare-we-there-yet@3.0.1(transitive)

• + Addedgauge@4.0.4(transitive)

• + Addednpmlog@6.0.2(transitive)

• - Removedare-we-there-yet@2.0.0(transitive)

• - Removedgauge@3.0.2(transitive)

• - Removednpmlog@5.0.1(transitive)

• - Removedobject-assign@4.1.1(transitive)

• Updatednpmlog@^6.0.0