clamscan - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

package.json

 {
   "name": "clamscan",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "author": "Kyle Farris <[e-mail]> (http://chomponllc.com)",
@@ -5,0 +5,0 @@ "description": "Use Node JS to scan files on your server with ClamAV's clamscan/clamdscan binary or via TCP to a remote server or local UNIX Domain socket. This is especially useful for scanning uploaded files provided by un-trusted sources.",

README.md

@@ -20,15 +20,10 @@ [![NPM Version][npm-version-image]][npm-url] [![NPM Downloads][npm-downloads-image]][npm-url] [![Node.js Version][node-image]][node-url] [![Build Status][travis-image]][travis-url]
 - [Dependencies](#dependencies)
-
   - [Local Binary Method](#to-use-local-binary-method-of-scanning)
   - [TCP/Domain Socket Method](#to-use-clamav-using-tcp-sockets)
-
 - [How to Install](#how-to-install)
 - [License Info](#license-info)
 - [Getting Started](#getting-started)
-
   - [A note about using this module via sockets or TCP](#a-note-about-using-this-module-via-sockets-or-tcp)
-
 - [Basic Usage Example](#basic-usage-example)
 - [API](#api)
-
   - [get_version](#get_version)
@@ -40,3 +35,2 @@ - [is_infected (alias: scan_file)](#is_infected)
   - [passthrough](#passthrough)
-
 - [Contribute](#contribute)
@@ -43,0 +37,0 @@ - [Resources used to help develop this module](#resources-used-to-help-develop-this-module)

tests/test_config.js

@@ -23,2 +23,8 @@ const fs = require('fs');
 
+// Set socket to one default for TravisCI, another for anything else.
+const socket = (process.env.CI ? '/var/run/clamav/clamd.ctl' : '/var/run/clamd.scan/clamd.sock');
+
+// DRY
+const path = which('clamscan');
+
 module.exports = {
@@ -29,9 +35,9 @@ remove_infected: false,                         // don't change
     clamscan: {
-        path: which('clamscan'),                    // required for testing
+        path,                                       // required for testing
     },
     clamdscan: {
-        socket: '/var/run/clamd.scan/clamd.sock',   // required for testing (change for your system) - can be set to null
+        socket,                                     // required for testing (change for your system) - can be set to null
         host: '127.0.0.1',                          // required for testing (change for your system) - can be set to null
         port: 3310,                                 // required for testing (change for your system) - can be set to null
-        path: which('clamdscan'),                   // required for testing
+        path,                                       // required for testing
         //config_file: '/etc/clamd.d/scan.conf'     // set if required
@@ -38,0 +44,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

202324

increased by0.11%

Lines of code

2955

increased by0.14%

Worsened metrics

Number of lines in readme file

671

decreased by-0.89%

Number of low supply chain risk alerts

10

increased by11.11%

No dependency changes