buoy-config - npm Package Compare versions

Comparing version 2.0.8-0 to 2.0.9-0

dist/utils.js

@@ -30,3 +30,33 @@ 'use strict';
   } catch (e) {
-    return {};
+    var path = require('path');
+    var fs = require('fs');
+    var _images = {};
+
+    if (fs.statSync(path.join(__dirname, 'images')).isDirectory()) {
+      var _iteratorNormalCompletion = true;
+      var _didIteratorError = false;
+      var _iteratorError = undefined;
+
+      try {
+        for (var _iterator = fs.readdirSync(path.join(__dirname, 'images'))[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true) {
+          var child = _step.value;
+
+          _images[child.replace('./', '')] = child;
+        }
+      } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+      } finally {
+        try {
+          if (!_iteratorNormalCompletion && _iterator.return) {
+            _iterator.return();
+          }
+        } finally {
+          if (_didIteratorError) {
+            throw _iteratorError;
+          }
+        }
+      }
+    }
+    return _images;
   }
@@ -33,0 +63,0 @@ };

package.json

 {
   "name": "buoy-config",
-  "version": "2.0.8-0",
+  "version": "2.0.9-0",
   "description": "Common configuration files for Buoy clients",
@@ -5,0 +5,0 @@ "main": "dist/index.js",

src/utils.js

@@ -17,4 +17,13 @@ import navConfig from "./configurations/nav.json"
     return importAll(require.context('./images', false, /\.(png|jpe?g|svg)$/))
-  } catch(e) {
-    return {}
+  } catch (e) {
+    const path = require('path')
+    const fs = require('fs')
+    let images = {}
+
+    if (fs.statSync(path.join(__dirname, 'images')).isDirectory()) {
+      for (let child of fs.readdirSync(path.join(__dirname, 'images'))) {
+        images[child.replace('./', '')] = child
+      }
+    }
+    return images
   }
@@ -21,0 +30,0 @@ }

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

218490

increased by0.57%

Lines of code

1060

increased by3.41%

Worsened metrics

Number of low supply chain risk alerts

3

increased by200%

No dependency changes