asset-pipe-common - npm Package Compare versions

Comparing version 1.0.0-alpha.3 to 1.0.0-alpha.4

lib/common.js

@@ -1,2 +0,2 @@
-"use strict";
+'use strict';
 
@@ -8,4 +8,3 @@ const stream = require('readable-stream');
 
-
-/** 
+/**
   * Writable stream to build a hash out of all the "source" attributes in a
@@ -26,3 +25,3 @@ * stream of asset objects.
 
-    get hash() {
+    get hash () {
         return this._hasher.digest('hex');
@@ -40,5 +39,4 @@ }
 
-
-/** 
-  * Writable stream to build a hash out of the content of a non object mode 
+/**
+  * Writable stream to build a hash out of the content of a non object mode
   * stream
@@ -58,3 +56,3 @@ * @class
 
-    get hash() {
+    get hash () {
         return this._hasher.digest('hex');
@@ -72,3 +70,2 @@ }
 
-
 /**
@@ -88,3 +85,2 @@ * Creates a hash out of a String or Buffer
 
-
 /**
@@ -100,3 +96,3 @@ * Constructs a temporary filename
     const rand = Math.floor(Math.random() * 1000).toString();
-    return 'tmp-' + Date.now().toString() + '-' + rand + '.' + fileType;
+    return `tmp-${Date.now().toString()}-${rand}.${fileType}`;
 };

package.json

 {
   "name": "asset-pipe-common",
-  "version": "1.0.0-alpha.3",
+  "version": "1.0.0-alpha.4",
   "author": {
@@ -23,5 +23,2 @@ "name": "Trygve Lie",
   ],
-  "engines": {
-    "node" : "6.x"
-  },
   "bugs": {
@@ -36,7 +33,13 @@ "url": "https://github.com/asset-pipe/asset-pipe-common/issues"
     "JSONStream": "1.2.1",
-    "tap": "8.0.1"
+    "eslint": "^3.15.0",
+    "eslint-config-finn": "^1.0.1",
+    "tap": "10.0.2"
   },
   "scripts": {
+    "lint": "eslint .",
     "test": "tap test/*.js"
-  }
+  },
+  "files": [
+    "lib"
+  ]
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

2829

decreased by-99.58%

Dev dependency count

4

increased by100%

Number of package files

3

decreased by-62.5%

Lines of code

72

decreased by-96.63%

Number of medium supply chain risk alerts

2

increased byInfinity%

No dependency changes