bson - npm Package Compare versions

Comparing version 0.1.7 to 0.1.8

lib/bson/binary.js

 /**
  * Module dependencies.
  */
-var Buffer = require('buffer').Buffer; // TODO just use global Buffer
+if(typeof window === 'undefined') { 
+  var Buffer = require('buffer').Buffer; // TODO just use global Buffer
+}
 
@@ -6,0 +8,0 @@ // Binary default subtype

package.json

 { "name" :            "bson"
 , "description" :     "A bson parser for node.js and the browser"
 , "keywords" :        ["mongodb", "bson", "parser"]
-, "version" :         "0.1.7"
+, "version" :         "0.1.8"
 , "author" :          "Christian Amor Kvalheim <[e-mail]>"
@@ -15,2 +15,3 @@ , "contributors" :  []
 	  , "gleak": "0.2.3"
+    , "one": "latest"
   }
@@ -20,6 +21,9 @@ , "config":         { "native" : false }
 , "directories" :   { "lib" : "./lib/bson" }
-, "engines" :       { "node" : ">=0.6.0" }
-, "scripts": { "install" : "node install.js || (exit 0)", "test" : "nodeunit ./test/node && TEST_NATIVE=TRUE nodeunit ./test/node" }
+, "engines" :       { "node" : ">=0.6.19" }
+, "scripts": { 
+    "install" : "(node-gyp rebuild 2> builderror.log) || (exit 0)", 
+    "test" : "nodeunit ./test/node && TEST_NATIVE=TRUE nodeunit ./test/node" 
+}
 , "licenses" :    [ { "type" :  "Apache License, Version 2.0"
                     , "url" :   "http://www.apache.org/licenses/LICENSE-2.0" } ]
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Improved metrics

Total package byte prevSize

1268048

increased by13.91%

Number of package files

60

increased by5.26%

Lines of code

15948

increased by36.52%

Number of high supply chain risk alerts

0

decreased by-100%

Number of low supply chain risk alerts

17

decreased by-22.73%

Worsened metrics

Dev dependency count

3

increased by50%

No dependency changes