appmetrics - npm Package Compare versions

Comparing version 3.1.1 to 3.1.2

extract_all_binaries.js

@@ -44,4 +44,4 @@ /*******************************************************************************
 ];
-var AGENTCORE_VERSION = '3.2.4';
-var APPMETRICS_VERSION = '3.1.1';
+var AGENTCORE_VERSION = '3.2.6';
+var APPMETRICS_VERSION = '3.1.2';
 
@@ -48,0 +48,0 @@ var LOG_FILE = path.join(INSTALL_DIR, 'install.log');

omr-agentcore/README.md

@@ -22,5 +22,7 @@ # OMR AgentCore
 ## Version
-3.2.4
+3.2.6
 
 ## Release History
+`3.2.6` - Bug fixes.
+`3.2.5` - Bug fixes.
 `3.2.4` - Node on z/OS support.
@@ -27,0 +29,0 @@ `3.2.3` - Swift 4 support.

package.json

 {
   "name": "appmetrics",
-  "version": "3.1.1",
+  "version": "3.1.2",
   "engines": {
@@ -5,0 +5,0 @@ "node": ">=4"

probes/https-outbound-probe.js

@@ -25,8 +25,13 @@ /*******************************************************************************
 var util = require('util');
+var semver = require('semver');
 
-// In https 'get' calls 'request' so we only instrument 'request'
-var methods = ['request'];
+var methods;
+// In Node.js < v8.9.0 'get' calls 'request' so we only instrument 'request'
+if (semver.lt(process.version, '8.9.0')) {
+  methods = ['request'];
+} else {
+  methods = ['request', 'get'];
+}
 
 // Probe to instrument outbound https requests
-
 function HttpsOutboundProbe() {
@@ -33,0 +38,0 @@ Probe.call(this, 'https'); // match the name of the module we're instrumenting

README.md

@@ -242,3 +242,9 @@ # Node Application Metrics
     * `time` (Number) the milliseconds when the sample was taken. This can be converted to a Date using `new Date(data.time)`.
-    * `type` (String) the type of GC cycle, either 'M' or 'S'.
+    * `type` (String) the type of GC cycle, either:
+      - `'M'`: MarkSweepCompact, aka "major"
+      - `'S'`: Scavenge, aka "minor"
+      - `'I'`: IncrementalMarking, aka "incremental" (only exists on node 5.x
+        and greater)
+      - '`W'`: ProcessWeakCallbacks, aka "weakcb" (only exists on node 5.x
+        and greater)
     * `size` (Number) the size of the JavaScript heap in bytes.
@@ -503,5 +509,6 @@ * `used` (Number) the amount of memory used on the JavaScript heap in bytes.
 ## Version
-3.1.1
+3.1.2
 
 ## Release History
+`3.1.2` - Bug fixes.  
 `3.1.1` - Node v6 on z/OS support.  
@@ -508,0 +515,0 @@ `3.1.0` - HTTPS probe added.

tests/api_tests.js

@@ -117,3 +117,3 @@ /*******************************************************************************
 
-    t.ok(memData.physical_used === -1 || memData.physical_used >= 0, 'Contains a valid used physical memory');
+    t.ok(memData.physical_used === -1 || memData.physical_used >= 0, 'Contains a valid used physical memory', memData);
     t.end();
@@ -128,3 +128,4 @@ });
 
-    t.ok(gcData.type === 'M' || gcData.type === 'S', 'Contains an expected GC type (expected "M" or "S")');
+    const gcTypes = {M: 1, S: 1, I: 1, W: 1};
+    t.ok(gcTypes[gcData.type], '"' + gcData.type + '" is an expected GC type');
 
@@ -131,0 +132,0 @@ t.ok(isInteger(gcData.size), 'Heap size is an integer');

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 4 instances in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Improved metrics

Number of lines in readme file

543

increased by1.31%

Number of low supply chain risk alerts

19

decreased by-75.64%

Number of medium supply chain risk alerts

15

decreased by-76.56%

Worsened metrics

Total package byte prevSize

2272770

decreased by-90.27%

Number of package files

342

decreased by-37.25%

Lines of code

6895

decreased by-62.77%

No dependency changes