balena-request - npm Package Compare versions

Comparing version 10.0.6 to 10.0.7-use-balena-node-web-streams-dff1ff91a08f8d4e11caca28b0d6a4d3e304c5e6

build/progress.js

@@ -22,3 +22,3 @@ // Generated by CoffeeScript 1.12.7
 
-webStreams = require('node-web-streams');
+webStreams = require('@balena/node-web-streams');
 
@@ -25,0 +25,0 @@ progress = require('progress-stream');

CHANGELOG.md

@@ -7,2 +7,6 @@ # Change Log
 
+## 10.0.7 - 2020-02-13
+
+* Use @balena/node-web-streams instead of a GitHub branch [Thodoris Greasidis]
+
 ## 10.0.6 - 2020-02-13
@@ -9,0 +13,0 @@

package.json

 {
   "name": "balena-request",
-  "version": "10.0.6",
+  "version": "10.0.7-use-balena-node-web-streams-dff1ff91a08f8d4e11caca28b0d6a4d3e304c5e6",
   "description": "Balena HTTP client",
@@ -54,2 +54,3 @@ "main": "build/request.js",
   "dependencies": {
+    "@balena/node-web-streams": "^0.2.3",
     "balena-errors": "^4.2.1",
@@ -60,3 +61,2 @@ "bluebird": "^3.7.2",
     "lodash": "^4.17.15",
-    "node-web-streams": "github:balena-io-modules/node-web-streams#emit-errors",
     "progress-stream": "^2.0.0",
@@ -63,0 +63,0 @@ "qs": "^6.9.1",

New alerts

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

139857

increased by0.11%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

Dependency changes

• + Added@balena/node-web-streams@^0.2.3

• + Added@balena/node-web-streams@0.2.4(transitive)

• + Addedweb-streams-polyfill@3.3.3(transitive)

• - Removednode-web-streams@github:balena-io-modules/node-web-streams#emit-errors