bufferutil - npm Package Compare versions

Comparing version 4.0.8 to 4.0.9

package.json

 {
   "name": "bufferutil",
-  "version": "4.0.8",
+  "version": "4.0.9",
   "description": "WebSocket buffer utils",
@@ -11,4 +11,4 @@ "main": "index.js",
     "install": "node-gyp-build",
-    "prebuild": "prebuildify --napi --strip --target=14.0.0",
-    "prebuild-darwin-x64+arm64": "prebuildify --arch x64+arm64 --napi --strip --target=14.0.0",
+    "prebuild": "prebuildify --napi --strip --target=8.11.2",
+    "prebuild-darwin-x64+arm64": "prebuildify --arch x64+arm64 --napi --strip --target=8.11.2",
     "test": "mocha"
@@ -33,6 +33,6 @@ },
   "devDependencies": {
-    "mocha": "^10.0.0",
-    "node-gyp": "^9.1.0",
-    "prebuildify": "^5.0.0"
+    "mocha": "^11.0.1",
+    "node-gyp": "^11.0.0",
+    "prebuildify": "^6.0.0"
   }
 }

README.md

@@ -23,3 +23,4 @@ # bufferutil
 
-The module exports two functions.
+The module exports two functions. To maximize performance, parameters are not
+validated. It is the caller's responsibility to ensure that they are correct.
 
@@ -26,0 +27,0 @@ ### `bufferUtil.mask(source, mask, output, offset, length)`

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Improved metrics

Number of lines in readme file

80

increased by1.27%

Worsened metrics

Total package byte prevSize

371859

decreased by-10.22%

No dependency changes