@nearform/heap-profiler - npm Package Compare versions

Comparing version 0.8.0 to 0.8.1

package.json

 {
   "name": "@nearform/heap-profiler",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Heap dump, sample profiler and allocation timeline generator for Node.",
@@ -5,0 +5,0 @@ "author": "NearForm Ltd",

README.md

@@ -41,2 +41,4 @@ # @nearform/heap-profiler
 
+- `HEAP_PROFILER_PRELOADER_DISABLED`: If set to `true`, the preloader is not installed and you need to use the API to sample the process.
+
 - `HEAP_PROFILER_SNAPSHOT`: If set to `false`, it will not generate heap dump snapshots.
@@ -43,0 +45,0 @@

src/index.js

@@ -8,3 +8,3 @@ 'use strict'
 
-if (require.main === undefined) {
+if (process.env.HEAP_PROFILER_PRELOADER_DISABLED !== 'true' && require.main === undefined) {
   let logger = console
@@ -11,0 +11,0 @@

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

53071

increased by0.37%

Number of lines in readme file

109

increased by1.87%

Worsened metrics

Number of low supply chain risk alerts

52

increased by1.96%

No dependency changes