bones - npm Package Compare versions

Comparing version 1.3.24 to 1.3.25

package.json

 {
     "name": "bones",
     "description": "Framework for using backbone.js on the client and server.",
-    "version": "1.3.24",
+    "version": "1.3.25",
 
@@ -6,0 +6,0 @@ "author": {

server/middleware.js

@@ -82,5 +82,5 @@ var env = process.env.NODE_ENV || 'development';
             if (env === 'development') {
-                res.end(JSON.stringify(err));
+                res.end('HEAD' == req.method ? null : JSON.stringify(err));
             } else {
-                res.end(JSON.stringify({ message: err.message }));
+                res.end('HEAD' == req.method ? null : JSON.stringify({ message: err.message }));
             }
@@ -90,5 +90,5 @@ } else {
             if (env === 'development') {
-                res.end(err.stack);
+                res.end('HEAD' == req.method ? null : err.stack);
             } else {
-                res.end(err.message);
+                res.end('HEAD' == req.method ? null : err.message);
             }
@@ -95,0 +95,0 @@ }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

173949

increased by0.07%

Number of low supply chain risk alerts

26

decreased by-13.33%

Number of medium supply chain risk alerts

3

decreased by-25%

No dependency changes