cacache - npm Package Compare versions

Comparing version 17.0.6 to 17.0.7

lib/content/write.js

@@ -7,3 +7,3 @@ 'use strict'
 const fs = require('fs/promises')
-const moveFile = require('../util/move-file')
+const { moveFile } = require('@npmcli/fs')
 const { Minipass } = require('minipass')
@@ -165,4 +165,10 @@ const Pipeline = require('minipass-pipeline')
   await fs.mkdir(destDir, { recursive: true })
-  await moveFile(tmp.target, destination)
-  tmp.moved = true
+  try {
+    await moveFile(tmp.target, destination, { overwrite: false })
+    tmp.moved = true
+  } catch (err) {
+    if (!err.message.startsWith('The destination file exists')) {
+      throw Object.assign(err, { code: 'EEXIST' })
+    }
+  }
 }
@@ -169,0 +175,0 @@

package.json

 {
   "name": "cacache",
-  "version": "17.0.6",
+  "version": "17.0.7",
   "cache-version": {
@@ -57,3 +57,2 @@ "content": "2",
     "p-map": "^4.0.0",
-    "promise-inflight": "^1.0.1",
     "ssri": "^10.0.0",
@@ -60,0 +59,0 @@ "tar": "^6.1.11",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Dependency count

12

decreased by-7.69%

Number of low supply chain risk alerts

10

decreased by-9.09%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

63150

decreased by-2.72%

Number of package files

17

decreased by-5.56%

Lines of code

1226

decreased by-3.62%

Dependency changes

• + Addedcross-spawn@7.0.5(transitive)

• - Removedpromise-inflight@^1.0.1

• - Removedcross-spawn@7.0.3(transitive)

• - Removedpromise-inflight@1.0.1(transitive)