@qvac/classification-ggml - npm Package Compare versions

Comparing version 0.1.0 to 0.2.0

index.js

@@ -5,3 +5,3 @@ 'use strict'
 const path = require('bare-path')
-const process = require('bare-process')
+const env = require('bare-env')
 const QvacLogger = require('@qvac/logging')
@@ -16,4 +16,4 @@ const { createJobHandler, exclusiveRunQueue } = require('@qvac/infer-base')
 function resolveDefaultModelPath () {
-  if (typeof process !== 'undefined' && process.env && process.env.QVAC_CLASSIFICATION_MODEL_PATH) {
-    return process.env.QVAC_CLASSIFICATION_MODEL_PATH
+  if (env.QVAC_CLASSIFICATION_MODEL_PATH) {
+    return env.QVAC_CLASSIFICATION_MODEL_PATH
   }
@@ -79,3 +79,3 @@ return path.join(__dirname, 'weights', DEFAULT_WEIGHTS_FILENAME)
     const disableNativeLogger = !this._nativeLogger ||
-      (process.env && process.env.QVAC_CLASSIFICATION_DISABLE_NATIVE_LOGGER === '1')
+      env.QVAC_CLASSIFICATION_DISABLE_NATIVE_LOGGER === '1'
 
@@ -82,0 +82,0 @@ try {

package.json

 {
   "name": "@qvac/classification-ggml",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "GGML image classification addon for QVAC (MobileNetV3-Small CPU inference)",
@@ -62,3 +62,3 @@ "addon": true,
     "brittle": "^3.16.5",
-    "cmake-bare": "1.7.5",
+    "cmake-bare": "^1.7.5",
     "cmake-vcpkg": "^1.1.0",
@@ -71,5 +71,5 @@ "standard": "^17.0.0",
     "@qvac/logging": "^0.1.0",
+    "bare-env": "^3.0.0",
     "bare-fs": "^4.5.1",
-    "bare-path": "^3.0.0",
-    "bare-process": "^4.2.2"
+    "bare-path": "^3.0.0"
   },
@@ -79,3 +79,2 @@ "engines": {
   },
-  "peerDependencies": {},
   "exports": {
@@ -82,0 +81,0 @@ "./package": "./package.json",

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances

Improved metrics

Total package byte prevSize

37622365

6.41%

Number of low supply chain risk alerts

1

-83.33%

Number of medium supply chain risk alerts

16

-5.88%

Dependency changes

• + Added

  bare-env@^3.0.0

• + Added

  bare-os@3.9.1
  (transitive)

• - Removed

  bare-process@^4.2.2

• - Removed

  bare-abort@2.0.13
  (transitive)

• - Removed

  bare-hrtime@2.1.1
  (transitive)

• - Removed

  bare-os@3.9.2
  (transitive)

• - Removed

  bare-pipe@4.2.2
  (transitive)

• - Removed

  bare-posix@1.0.1
  (transitive)

• - Removed

  bare-process@4.5.0
  (transitive)

• - Removed

  bare-signals@4.2.0
  (transitive)

• - Removed

  bare-stdio@1.0.2
  (transitive)

• - Removed

  bare-tty@5.1.1
  (transitive)