bson-giga - npm Package Compare versions

Comparing version 1.1.6 to 1.1.7

lib/bson/parser/deserializer.js

 'use strict';
 
+const { Buffer } = require('buffer')
 var Long = require('../long').Long,
@@ -267,3 +268,3 @@ Double = require('../double').Double,
         if (promoteBuffers && promoteValues) {
-          object[name] = buffer.slice(index, index + binarySize);
+          object[name] = Buffer.from(buffer.slice(index, index + binarySize));
         } else {
@@ -270,0 +271,0 @@ object[name] = new Binary(buffer.slice(index, index + binarySize), subType);

package.json

@@ -15,3 +15,3 @@ {
   ],
-  "version": "1.1.6",
+  "version": "1.1.7",
   "author": "Christian Amor Kvalheim <[e-mail]>",
@@ -18,0 +18,0 @@ "contributors": [],

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

2

decreased by-50%

Worsened metrics

Total package byte prevSize

774650

decreased by-35.83%

Number of package files

28

decreased by-66.67%

Lines of code

21536

decreased by-21.23%

No dependency changes