@vercel/blob - npm Package Compare versions

Comparing version 0.16.0-30f46919-20231207123038 to 0.16.0-99c35286-20231214174115

dist/client.js

@@ -5,7 +5,6 @@ import {
   getTokenFromOptionsOrEnv
-} from "./chunk-IBVAQPES.js";
+} from "./chunk-GFVJSIN4.js";
 
 // src/client.ts
 import * as crypto from "crypto";
-import { fetch } from "undici";
 var put = createPutMethod({
@@ -12,0 +11,0 @@ allowedOptions: ["contentType"],

dist/index.js

@@ -14,6 +14,5 @@ import {
   validateBlobApiResponse
-} from "./chunk-IBVAQPES.js";
+} from "./chunk-GFVJSIN4.js";
 
 // src/del.ts
-import { fetch } from "undici";
 async function del(url, options) {
@@ -34,7 +33,6 @@ const blobApiResponse = await fetch(getApiUrl("/delete"), {
 // src/head.ts
-import { fetch as fetch2 } from "undici";
 async function head(url, options) {
   const headApiUrl = new URL(getApiUrl());
   headApiUrl.searchParams.set("url", url);
-  const blobApiResponse = await fetch2(headApiUrl, {
+  const blobApiResponse = await fetch(headApiUrl, {
     method: "GET",
@@ -59,3 +57,2 @@ // HEAD can't have body as a response, so we use GET
 // src/list.ts
-import { fetch as fetch3 } from "undici";
 async function list(options) {
@@ -76,3 +73,3 @@ var _a;
   }
-  const blobApiResponse = await fetch3(listApiUrl, {
+  const blobApiResponse = await fetch(listApiUrl, {
     method: "GET",
@@ -108,3 +105,2 @@ headers: {
 // src/copy.ts
-import { fetch as fetch4 } from "undici";
 async function copy(fromUrl, toPathname, options) {
@@ -130,3 +126,3 @@ if (!options) {
   }
-  const blobApiResponse = await fetch4(
+  const blobApiResponse = await fetch(
     getApiUrl(`/${toPathname}?fromUrl=${fromUrl}`),
@@ -133,0 +129,0 @@ { method: "PUT", headers }

package.json

 {
   "name": "@vercel/blob",
-  "version": "0.16.0-30f46919-20231207123038",
+  "version": "0.16.0-99c35286-20231214174115",
   "description": "The Vercel Blob JavaScript API client",
@@ -27,3 +27,2 @@ "homepage": "https://vercel.com/storage/blob",
   "browser": {
-    "undici": "./dist/undici-browser.js",
     "crypto": "./dist/crypto-browser.js"
@@ -49,4 +48,3 @@ },
   "dependencies": {
-    "jest-environment-jsdom": "29.7.0",
-    "undici": "5.27.0"
+    "jest-environment-jsdom": "29.7.0"
   },
@@ -62,2 +60,3 @@ "devDependencies": {
     "tsup": "7.2.0",
+    "undici": "5.27.0",
     "eslint-config-custom": "0.0.0",
@@ -71,3 +70,3 @@ "tsconfig": "0.0.0"
     "build": "tsup && pnpm run copy-shims",
-    "copy-shims": "cp src/undici-browser.js dist/undici-browser.js && cp src/crypto-browser.js dist/crypto-browser.js",
+    "copy-shims": "cp src/crypto-browser.js dist/crypto-browser.js",
     "dev": "pnpm run copy-shims && tsup --watch --clean=false",
@@ -74,0 +73,0 @@ "lint": "eslint --max-warnings=0 .",

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Improved metrics

Dependency count

1

decreased by-50%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

155984

decreased by-1.41%

Dev dependency count

11

increased by10%

Number of package files

21

decreased by-4.55%

Lines of code

1311

decreased by-1.13%

Number of medium supply chain risk alerts

12

increased by300%

Dependency changes

• - Removedundici@5.27.0

• - Removed@fastify/busboy@2.1.1(transitive)

• - Removedundici@5.27.0(transitive)