@ndelangen/get-tarball - npm Package Compare versions

Comparing version 3.0.6 to 3.0.7--canary.49a7f05.0

CHANGELOG.md

@@ -1,47 +0,1 @@
-# v3.0.6 (Thu Mar 02 2023)
-
-#### 🐛 Bug Fix
-
-- fix: make got a dependency and auto a devDependency [#2](https://github.com/ndelangen/download-tarball/pull/2) ([@freakzlike](https://github.com/freakzlike))
-- modernize the codebase [#1](https://github.com/ndelangen/download-tarball/pull/1) ([@ndelangen](https://github.com/ndelangen))
-
-#### ⚠️ Pushed to `master`
-
-- ignore ts error ([@ndelangen](https://github.com/ndelangen))
-- upgrade workflow ([@ndelangen](https://github.com/ndelangen))
-- rename because of npm restriction ([@ndelangen](https://github.com/ndelangen))
-- add pnpm setup to workflow ([@ndelangen](https://github.com/ndelangen))
-- add more pnpm ignore files ([@ndelangen](https://github.com/ndelangen))
-- make public ([@ndelangen](https://github.com/ndelangen))
-- fix package name ([@ndelangen](https://github.com/ndelangen))
-- add config ([@ndelangen](https://github.com/ndelangen))
-- add auto ([@ndelangen](https://github.com/ndelangen))
-- 2.0.0 ([@kesla](https://github.com/kesla))
-- Allow `got` to select the correct `Agent` for the given request ([@tekerson](https://github.com/tekerson))
-- 1.1.0 ([@kesla](https://github.com/kesla))
-- Passthrough `extractOpts` to tar-fs ([@Qard](https://github.com/Qard))
-- chore(package): update tmp to version 0.0.29 ([@greenkeeperio-bot](https://github.com/greenkeeperio-bot))
-- 1.0.3 ([@kesla](https://github.com/kesla))
-- don't use bluebird ([@kesla](https://github.com/kesla))
-- 1.0.2 ([@kesla](https://github.com/kesla))
-- use xo for lint ([@kesla](https://github.com/kesla))
-- use keep-alive ([@kesla](https://github.com/kesla))
-- 1.0.1 ([@kesla](https://github.com/kesla))
-- use pump rather than end-of-stream ([@kesla](https://github.com/kesla))
-- should return promise ([@kesla](https://github.com/kesla))
-- 1.0.0 ([@kesla](https://github.com/kesla))
-- initial commit ([@kesla](https://github.com/kesla))
-- add travis ([@kesla](https://github.com/kesla))
-
-#### Authors: 6
-
-- [@freakzlike](https://github.com/freakzlike)
-- Brenton Alker ([@tekerson](https://github.com/tekerson))
-- David Björklund ([@kesla](https://github.com/kesla))
-- Greenkeeper ([@greenkeeperio-bot](https://github.com/greenkeeperio-bot))
-- Norbert de Langen ([@ndelangen](https://github.com/ndelangen))
-- Stephen Belanger ([@Qard](https://github.com/Qard))
-
----
-
 # v3.0.3 (Wed Feb 22 2023)
@@ -48,0 +2,0 @@

package.json

 {
   "name": "@ndelangen/get-tarball",
-  "version": "3.0.6",
+  "version": "3.0.7--canary.49a7f05.0",
   "description": "Download a tarball (optionally gzipped) to a folder & extract it in the process. Uses the wonderful & super quick tar-fs & gunzip-maybe srcraries.",
@@ -40,6 +40,6 @@ "main": "dist/index.js",
     "tsup": "^6.6.3",
+    "got": "^12.5.3",
     "typescript": "^4.9.5"
   },
   "dependencies": {
-    "got": "^12.5.3",
     "gunzip-maybe": "^1.4.2",
@@ -46,0 +46,0 @@ "pump": "^3.0.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

584419

increased by3002.51%

Dependency count

3

decreased by-25%

Lines of code

15999

increased by13692.24%

Worsened metrics

Dev dependency count

15

increased by7.14%

Number of low quality alerts

1

increased byInfinity%

Number of low supply chain risk alerts

4

increased byInfinity%

Number of medium supply chain risk alerts

25

increased by525%

Dependency changes

• - Removedgot@^12.5.3

• - Removed@sindresorhus/is@5.6.0(transitive)

• - Removed@szmarczak/http-timer@5.0.1(transitive)

• - Removed@types/http-cache-semantics@4.0.4(transitive)

• - Removedcacheable-lookup@7.0.0(transitive)

• - Removedcacheable-request@10.2.14(transitive)

• - Removeddecompress-response@6.0.0(transitive)

• - Removeddefer-to-connect@2.0.1(transitive)

• - Removedform-data-encoder@2.1.4(transitive)

• - Removedget-stream@6.0.1(transitive)

• - Removedgot@12.6.1(transitive)

• - Removedhttp-cache-semantics@4.1.1(transitive)

• - Removedhttp2-wrapper@2.2.1(transitive)

• - Removedjson-buffer@3.0.1(transitive)

• - Removedkeyv@4.5.4(transitive)

• - Removedlowercase-keys@3.0.0(transitive)

• - Removedmimic-response@3.1.04.0.0(transitive)

• - Removednormalize-url@8.0.1(transitive)

• - Removedp-cancelable@3.0.0(transitive)

• - Removedquick-lru@5.1.1(transitive)

• - Removedresolve-alpn@1.2.1(transitive)

• - Removedresponselike@3.0.0(transitive)