changing - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

History.md

 
+1.0.2 / 2017-08-08
+==================
+
+  * fix: fix ReDoS security issue (#5)
+  * feat: remove EventEmitter from 'event' module
+
 1.0.1 / 2015-06-17
@@ -3,0 +9,0 @@ ==================

index.js

@@ -20,3 +20,3 @@ /**!
 const ms = require('humanize-ms');
-const EventEmitter = require('events').EventEmitter;
+const EventEmitter = require('events');
 
@@ -23,0 +23,0 @@ module.exports = Watcher;

package.json

 {
   "name": "changing",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Watching `file`, `dir` or `link` changing, using interval timer.",
@@ -19,3 +19,3 @@ "main": "index.js",
   "dependencies": {
-    "humanize-ms": "~1.0.1"
+    "humanize-ms": "^1.2.1"
   },
@@ -25,3 +25,3 @@ "devDependencies": {
     "contributors": "*",
-    "istanbul-harmony": "*",
+    "istanbul": "*",
     "jshint": "*",
@@ -28,0 +28,0 @@ "mocha": "*"

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

6867

increased by1.6%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedhumanize-ms@1.2.1(transitive)

• + Addedms@2.1.3(transitive)

• - Removedhumanize-ms@1.0.2(transitive)

• - Removedms@0.7.3(transitive)

• Updatedhumanize-ms@^1.2.1