basic-ftp - npm Package Compare versions

Comparing version 5.1.0 to 5.2.0

dist/Client.js

@@ -626,2 +626,8 @@ "use strict";
         for (const file of await this.list()) {
+            const hasInvalidName = !file.name || (0, path_1.basename)(file.name) !== file.name;
+            if (hasInvalidName) {
+                const safeName = JSON.stringify(file.name);
+                this.ftp.log(`Invalid filename from server listing, will skip file. (${safeName})`);
+                continue;
+            }
             const localPath = (0, path_1.join)(localDirPath, file.name);
@@ -628,0 +634,0 @@ if (file.isDirectory) {

package.json

 {
   "name": "basic-ftp",
-  "version": "5.1.0",
+  "version": "5.2.0",
   "description": "FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.",
@@ -42,9 +42,9 @@ "main": "dist/index",
     "@eslint/eslintrc": "3.3.3",
-    "@eslint/js": "9.39.2",
+    "@eslint/js": "10.0.1",
     "@types/mocha": "10.0.10",
-    "@types/node": "25.0.3",
-    "@typescript-eslint/eslint-plugin": "8.50.1",
-    "@typescript-eslint/parser": "8.50.1",
-    "eslint": "9.39.2",
-    "globals": "16.5.0",
+    "@types/node": "25.3.0",
+    "@typescript-eslint/eslint-plugin": "8.56.0",
+    "@typescript-eslint/parser": "8.56.0",
+    "eslint": "10.0.1",
+    "globals": "17.3.0",
     "mocha": "11.7.5",
@@ -51,0 +51,0 @@ "typescript": "5.9.3"

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

137954

0.24%

Lines of code

3069

0.2%

Number of medium maintenance alerts

0

-100%

No dependency changes