appmetrics - npm Package Compare versions

Comparing version 4.0.1 to 5.0.0

package.json

 {
   "name": "appmetrics",
-  "version": "4.0.1",
+  "version": "5.0.0",
   "engines": {
@@ -22,3 +22,3 @@ "node": ">=6"
     "eslint-config-strongloop": "^2.1.0",
-    "node-gyp": "3.x",
+    "node-gyp": "4.x",
     "prettier": "^1.4.4",
@@ -32,4 +32,3 @@ "tap": "^12.0.1"
     "test": "tap --reporter tap --timeout=120 tests/*tests.js tests/probes/http*test.js tests/headless_test.js",
-    "travis": "tap --reporter tap --timeout=120 tests/*tests.js tests/probes/http*test.js tests/headless_test.js --coverage",
-    "posttravis": "./get_code_cov.sh && tap --coverage-report=lcov && codecov --disable=gcov",
+    "travis": "npm test",
     "install": "node extract_all_binaries.js || node-gyp rebuild"
@@ -36,0 +35,0 @@ },

README.md

@@ -45,3 +45,3 @@ # Node Application Metrics
  Request tracking   | A tree of application requests, events and optionally trace (disabled by default)
- Function trace     | Tracing of application function calls that occur during a request (disabled by default)  
+ Function trace     | Tracing of application function calls that occur during a request (disabled by default)
 
@@ -144,3 +144,3 @@ ## Performance overhead
 :--------------------|:-------------------------|:-----------------------------
- `applicationID`     | `string`                 | Specifies a unique identifier for the mqtt connection             
+ `applicationID`     | `string`                 | Specifies a unique identifier for the mqtt connection
  `mqtt`              | `string['off'\|'on']`    | Specifies whether the monitoring agent sends data to the mqtt broker. The default value is `'on'`
@@ -198,2 +198,3 @@ `mqttHost`          | `string`                 | Specifies the host name of the mqtt broker
 ### Event: 'cpu'
+**_Not supported on z/OS_**
 Emitted when a CPU monitoring sample is taken.
@@ -423,14 +424,7 @@ * `data` (Object) the data from the CPU sample:
 
-* **Node.js v4** on:
-  * 64-bit or 32-bit Windows (x64 or x86)
-  * 64-bit or 32-bit Linux (x64, x86, ppc64, ppc64le, s390, s390x)
-  * 64-bit AIX (ppc64)
-  * 64-bit macOS (x64)
-* **Node.js v6** on all of the above, plus:
-  * 64-bit runtime on z/OS (os390)
-* **Node.js v8** on:
+* **Node.js v8, 10, 12** on:
   * 64-bit Windows (x64)
   * 64-bit Linux (x64, ppc64, ppc64le, s390x)
   * 64-bit AIX (ppc64)
-  * 64-bit IBM i (ppc64) 
+  * 64-bit IBM i (ppc64)
     * Before running `npm install appmetrics`, ensure the environment variable `CC=gcc` is set.
@@ -478,3 +472,3 @@ * Functionality for Memory and CPU stats not fully implemented, currently under construction.
 ## License
-This project is released under an Apache 2.0 open source license.  
+This project is released under an Apache 2.0 open source license.
 
@@ -491,37 +485,39 @@ ## Versioning scheme
 
-| Module Version   | Release Date | Minimum EOL | EOL With     | Status  |
-|------------------|--------------|-------------|--------------|---------|
-| V4.x.x	         | Jan 2018     | Dec 2019    |              | Current |
+| Module Version   | Release Date | Minimum EOL | EOL With     | Status      |
+|------------------|--------------|-------------|--------------|-------------|
+| V4.x.x           | Jan 2018     | Dec 2019    |              | Maintenance |
+| V5.x.x           | May 2019     | Dec 2020    |              | Current     |
 
 ## Version
-4.0.1
+5.0.0
 
 ## Release History
-`4.0.1` - Bug fix release including adding Node 10 support on Windows (Unix already working).  
-`4.0.0` - Remove node-hc and add support for preloading.  
-`3.1.3` - Packaging fix.  
-`3.1.2` - Bug fixes.  
-`3.1.1` - Node v6 on z/OS support.  
-`3.1.0` - HTTPS probe added. Remove support for Node v7.    
-`3.0.2` - Probe defect for Node 8 support.  
-`3.0.1` - Packaging bug fix to allow build from source if binary not present.  
-`3.0.0` - Remove express probe. Additional data available in http and request events. Code improvements.  
-`2.0.1` - Remove support for Node.js 0.10, 0.12, 5.  Add heapdump api call.  
-`1.2.0` - Add file data collection capability and option configuration via api.  
-`1.1.2` - Update agent core to 3.0.10, support Node.js v7.  
-`1.1.1` - Fix node-gyp rebuild failure and don't force MQTT broker to on  
-`1.1.0` - Bug fixes, improved MongoDB data, updated dependencies, CPU watchdog feature  
-`1.0.13` - Express probe, strong-supervisor integration  
-`1.0.12` - Appmetrics now fully open sourced under Apache 2.0 license  
-`1.0.11` - Bug fixes    
-`1.0.10` - Bug fixes  
-`1.0.9` - Loopback and Riak support, bug fixes and update to agent core 3.0.9.  
-`1.0.8` - Oracle support, bug fixes and api tests runnable using 'npm test'.  
-`1.0.7` - StrongOracle support, support for installing with a proxy, expose MongoDB, MQLight and MySQL events to connectors.  
-`1.0.6` - OracleDB support and bug fixes.  
-`1.0.5` - Expose HTTP events to connectors (including MQTT).  
-`1.0.4` - Redis, Leveldown, Postgresql, Memcached, MQLight and MQTT support, higher precision timings, and improved performance.  
-`1.0.3` - Node.js v4 support.  
-`1.0.2` - HTTP, MySQL, MongoDB, request tracking and function tracing support.  
-`1.0.1` - Mac OS X support, io.js v2 support.  
+`5.0.0` - Add Node 12 support, remove Node 6 support.
+`4.0.1` - Bug fix release including adding Node 10 support on Windows (Unix already working).
+`4.0.0` - Remove node-hc and add support for preloading.
+`3.1.3` - Packaging fix.
+`3.1.2` - Bug fixes.
+`3.1.1` - Node v6 on z/OS support.
+`3.1.0` - HTTPS probe added. Remove support for Node v7.
+`3.0.2` - Probe defect for Node 8 support.
+`3.0.1` - Packaging bug fix to allow build from source if binary not present.
+`3.0.0` - Remove express probe. Additional data available in http and request events. Code improvements.
+`2.0.1` - Remove support for Node.js 0.10, 0.12, 5.  Add heapdump api call.
+`1.2.0` - Add file data collection capability and option configuration via api.
+`1.1.2` - Update agent core to 3.0.10, support Node.js v7.
+`1.1.1` - Fix node-gyp rebuild failure and don't force MQTT broker to on
+`1.1.0` - Bug fixes, improved MongoDB data, updated dependencies, CPU watchdog feature
+`1.0.13` - Express probe, strong-supervisor integration
+`1.0.12` - Appmetrics now fully open sourced under Apache 2.0 license
+`1.0.11` - Bug fixes
+`1.0.10` - Bug fixes
+`1.0.9` - Loopback and Riak support, bug fixes and update to agent core 3.0.9.
+`1.0.8` - Oracle support, bug fixes and api tests runnable using 'npm test'.
+`1.0.7` - StrongOracle support, support for installing with a proxy, expose MongoDB, MQLight and MySQL events to connectors.
+`1.0.6` - OracleDB support and bug fixes.
+`1.0.5` - Expose HTTP events to connectors (including MQTT).
+`1.0.4` - Redis, Leveldown, Postgresql, Memcached, MQLight and MQTT support, higher precision timings, and improved performance.
+`1.0.3` - Node.js v4 support.
+`1.0.2` - HTTP, MySQL, MongoDB, request tracking and function tracing support.
+`1.0.1` - Mac OS X support, io.js v2 support.
 `1.0.0` - First release.
@@ -528,0 +524,0 @@

tests/api_tests.js

@@ -350,3 +350,6 @@ /*******************************************************************************
     t.ok(parseInt(nodeEnvData['max.old.space.size']) > 0, 'max.old.space.size is positive');
-    if (semver.gt(process.version, '10.0.0')) {
+
+    if (semver.gt(process.version, '12.0.0')) {
+      t.skip();
+    } else if (semver.gt(process.version, '10.0.0')) {
       // heap size limit is now scaled by a factor - see
@@ -353,0 +356,0 @@ // https://github.com/nodejs/node/blob/v10.x/deps/v8/src/heap/heap.cc#L250

New alerts

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Improved metrics

Number of low supply chain risk alerts

11

decreased by-74.42%

Number of medium supply chain risk alerts

13

decreased by-7.14%

Worsened metrics

Total package byte prevSize

2278167

decreased by-89.35%

Number of package files

341

decreased by-25.22%

Lines of code

6960

decreased by-45.25%

Number of lines in readme file

525

decreased by-0.76%

No dependency changes