cacache - npm Package Compare versions

Comparing version 5.0.1 to 5.0.2

lib/entry-index.js

@@ -29,3 +29,7 @@ 'use strict'
     if (err) { return _cb(err) }
-    lockfile.lock(lock, function (err) {
+    lockfile.lock(lock, {
+      stale: 60000,
+      retries: 10,
+      wait: 10000
+    }, function (err) {
       if (err) { return _cb(err) }
@@ -32,0 +36,0 @@ fs.stat(bucket, function (err, existing) {

package.json

 {
   "name": "cacache",
-  "version": "5.0.1",
+  "version": "5.0.2",
   "description": "General content-addressable cache system that maintains a filesystem registry of file data.",
@@ -14,3 +14,5 @@ "main": "index.js",
     "pretest": "standard lib test *.js",
-    "test": "nyc -- tap -j8 test/*.js"
+    "test": "nyc -- tap -j8 test/*.js",
+    "update-coc": "weallbehave -o . && git add CODE_OF_CONDUCT.md && git commit -m 'docs(coc): updated CODE_OF_CONDUCT.md'",
+    "update-contrib": "weallcontribute -o . && git add CONTRIBUTING.md && git commit -m 'docs(contributing): updated CONTRIBUTING.md'"
   },
@@ -23,3 +25,18 @@ "repository": "https://github.com/zkat/cacache",
   ],
-  "author": "Kat Marchán <[e-mail]>",
+  "author": {
+    "name": "Kat Marchán",
+    "email": "[e-mail]",
+    "twitter": "maybekatz"
+  },
+  "contributors": [
+    {
+      "name": "Charlotte Spencer",
+      "email": "[e-mail]",
+      "twitter": "charlotteis"
+    },
+    {
+      "name": "Rebecca Turner",
+      "email": "[e-mail]"
+    }
+  ],
   "license": "CC0-1.0",
@@ -46,3 +63,5 @@ "dependencies": {
     "tacks": "^1.2.2",
-    "tap": "^10.0.2"
+    "tap": "^10.0.2",
+    "weallbehave": "^1.0.0",
+    "weallcontribute": "^1.0.7"
   },
@@ -49,0 +68,0 @@ "config": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

33455

increased by2.07%

Lines of code

727

increased by0.55%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dev dependency count

8

increased by33.33%

No dependency changes