cacache - npm Package Compare versions

Comparing version 13.0.0 to 13.0.1

CHANGELOG.md

@@ -5,2 +5,9 @@ # Changelog
 
+### [13.0.1](https://github.com/npm/cacache/compare/v13.0.0...v13.0.1) (2019-09-30)
+
+
+### Bug Fixes
+
+* **fix-owner:** chownr.sync quits on non-root uid ([08801be](https://github.com/npm/cacache/commit/08801be))
+
 ## [13.0.0](https://github.com/npm/cacache/compare/v12.0.3...v13.0.0) (2019-09-25)
@@ -7,0 +14,0 @@

lib/util/fix-owner.js

@@ -80,2 +80,7 @@ 'use strict'
   getSelf()
+  if (self.uid !== 0) {
+    // almost certainly can't chown anyway
+    return
+  }
+
   if (self.uid === uid && self.gid === gid) {
@@ -82,0 +87,0 @@ // No need to override if it's already what we used.

package.json

 {
   "name": "cacache",
-  "version": "13.0.0",
+  "version": "13.0.1",
   "cache-version": {
@@ -63,3 +63,3 @@ "content": "2",
     "figgy-pudding": "^3.5.1",
-    "fs-minipass": "^1.2.7",
+    "fs-minipass": "^2.0.0",
     "glob": "^7.1.4",
@@ -69,6 +69,6 @@ "graceful-fs": "^4.2.2",
     "lru-cache": "^5.1.1",
-    "minipass": "^2.6.5",
-    "minipass-collect": "^1.0.1",
-    "minipass-flush": "^1.0.3",
-    "minipass-pipeline": "^1.1.2",
+    "minipass": "^3.0.0",
+    "minipass-collect": "^1.0.2",
+    "minipass-flush": "^1.0.5",
+    "minipass-pipeline": "^1.2.2",
     "mkdirp": "^0.5.1",
@@ -90,17 +90,9 @@ "move-concurrently": "^1.0.1",
     "tacks": "^1.3.0",
-    "tap": "^14.6.4",
+    "tap": "^14.6.9",
     "weallbehave": "^1.2.0",
     "weallcontribute": "^1.0.9"
   },
-  "nyc": {
-    "branches": 70,
-    "lines": 80,
-    "functions": 80,
-    "statements": 80,
-    "exclude": [
-      "node_modules/**",
-      "coverage/**",
-      "test/**"
-    ]
+  "engines": {
+    "node": ">= 8"
   }
 }

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

99047

increased by0.15%

Lines of code

1666

increased by0.24%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedfs-minipass@2.1.0(transitive)

• - Removedfs-minipass@1.2.7(transitive)

• - Removedminipass@2.9.0(transitive)

• - Removedsafe-buffer@5.2.1(transitive)

• Updatedfs-minipass@^2.0.0

• Updatedminipass@^3.0.0

• Updatedminipass-collect@^1.0.2

• Updatedminipass-flush@^1.0.5

• Updatedminipass-pipeline@^1.2.2