adonis-lucid-mongodb - npm Package Compare versions

Comparing version 1.0.10 to 1.0.11

package.json

@@ -8,3 +8,3 @@ {
   },
-  "version": "1.0.10",
+  "version": "1.0.11",
   "scripts": {
@@ -11,0 +11,0 @@ "lint": "standard",

src/Database/index.js

@@ -145,3 +145,3 @@ 'use strict'
     }
-    const security = (config.connection.user !== '' || config.connection.password !== '') ? `${config.connection.user}:${config.connection.password}@` : ''
+    const security = (process.env.DB_USER && process.env.DB_PASSWORD) ? `${process.env.DB_USER}:${process.env.DB_PASSWORD}@` : (process.env.DB_USER ? `${process.env.DB_USER}@` : '')
     const connectionString = `mongodb://${security}${config.connection.host}:${config.connection.port}/${config.connection.database}`
@@ -148,0 +148,0 @@ const dbConnection = yield MongoClient.connect(connectionString)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

230679

increased by0.01%

Worsened metrics

Number of low supply chain risk alerts

9

increased by200%

No dependency changes