bindings - npm Package Compare versions

Comparing version 1.0.0 to 1.1.0

bindings.js

@@ -67,2 +67,4 @@
     , n
+    , b
+    , err
 
@@ -75,4 +77,6 @@ for (; i<l; i++) {
     try {
-      var b = require(n)
-      b.path = n
+      b = opts.path ? require.resolve(n) : require(n)
+      if (!opts.path) {
+        b.path = n
+      }
       return b
@@ -86,3 +90,3 @@ } catch (e) {
 
-  var err = new Error('Could not load the bindings file. Tried:\n'
+  err = new Error('Could not locate the bindings file. Tried:\n'
     + tries.map(function (a) { return opts.arrow + a }).join('\n'))
@@ -89,0 +93,0 @@ err.tries = tries

package.json

 { "name": "bindings"
 , "description": "Helper module for loading your native module's .node file"
 , "keywords": [ "native", "addon", "bindings", "gyp", "waf", "c", "c++" ]
-, "version": "1.0.0"
+, "version": "1.1.0"
 , "author": "Nathan Rajlich <[e-mail]> (http://tootallnate.net)"
@@ -6,0 +6,0 @@ , "repository": { "type": "git", "url": "git://github.com/TooTallNate/node-bindings.git" }

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

Non-existent author

Supply chain risk

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

8023

increased by0.99%

Lines of code

136

increased by3.03%

Number of high supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

5

increased by25%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes