closure-util - npm Package Compare versions

Comparing version 0.13.0 to 0.14.0

install.js

 var path = require('path');
+var fs = require('fs');
 
 var download = require('get-down');
 var log = require('npmlog');
-var fse = require('fs-extra');
+var mkdirp = require('mkdirp');
+var rimraf = require('rimraf');
 
@@ -21,3 +23,3 @@ var util = require('./lib/util');
 
-  fse.exists(dir, function(exists) {
+  fs.exists(dir, function(exists) {
     if (exists) {
@@ -28,3 +30,3 @@ log.verbose('install', 'Skipping ' + url);
     } else {
-      fse.mkdirp(dir, function(err) {
+      mkdirp(dir, function(err) {
         if (err) {
@@ -55,3 +57,3 @@ return callback(err);
         dl.on('error', function(err) {
-          fse.remove(dir, function(rimrafErr) {
+          rimraf(dir, function(rimrafErr) {
             if (rimrafErr) {
@@ -58,0 +60,0 @@ log.error('install', rimrafErr);

package.json

 {
   "name": "closure-util",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Utilities for Closure Library based projects.",
@@ -25,15 +25,16 @@ "main": "lib/index.js",
   "dependencies": {
+    "acorn": "0.4.2",
+    "async": "0.2.9",
+    "gaze": "0.4.3",
+    "get-down": "0.4.0",
     "glob": "3.2.7",
-    "async": "0.2.9",
+    "graceful-fs": "3.0.2",
+    "handlebars": "1.3.0",
     "lodash": "2.4.1",
-    "graceful-fs": "2.0.1",
-    "handlebars": "1.3.0",
-    "send": "0.1.4",
     "minimatch": "0.2.14",
+    "mkdirp": "0.5.0",
     "npmlog": "0.0.6",
-    "gaze": "0.4.3",
-    "acorn": "0.4.2",
-    "socket.io": "0.9.16",
-    "fs-extra": "0.8.1",
-    "get-down": "0.3.0"
+    "rimraf": "2.2.8",
+    "send": "0.1.4",
+    "socket.io": "0.9.16"
   },
@@ -40,0 +41,0 @@ "devDependencies": {

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

84592

increased by0.13%

Lines of code

1928

increased by0.1%

Worsened metrics

Dependency count

14

increased by7.69%

Dependency changes

• + Addedmkdirp@0.5.0

• + Addedrimraf@2.2.8

• + Addeddecompress-zip@0.0.8(transitive)

• + Addedget-down@0.4.0(transitive)

• + Addedgraceful-fs@3.0.2(transitive)

• + Addedminimist@0.0.8(transitive)

• + Addedmkdirp@0.5.0(transitive)

• + Addedmout@0.9.1(transitive)

• + Addednopt@2.2.1(transitive)

• + Addedrequest@2.36.0(transitive)

• + Addedtldts@6.1.74(transitive)

• + Addedtldts-core@6.1.74(transitive)

• + Addedtough-cookie@5.1.0(transitive)

• + Addedtunnel-agent@0.4.3(transitive)

• - Removedfs-extra@0.8.1

• - Removeddecompress-zip@0.0.3(transitive)

• - Removedfs-extra@0.8.1(transitive)

• - Removedget-down@0.3.0(transitive)

• - Removedgraceful-fs@2.0.13.0.12(transitive)

• - Removedjsonfile@1.1.1(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedmkdirp@0.3.50.5.6(transitive)

• - Removedmout@0.8.0(transitive)

• - Removednatives@1.1.6(transitive)

• - Removedncp@0.4.2(transitive)

• - Removednopt@2.1.2(transitive)

• - Removedpunycode@2.3.1(transitive)

• - Removedq@0.9.7(transitive)

• - Removedrequest@2.30.0(transitive)

• - Removedtough-cookie@0.9.15(transitive)

• - Removedtunnel-agent@0.3.0(transitive)

• - Removedzlib@1.0.5(transitive)

• Updatedget-down@0.4.0

• Updatedgraceful-fs@3.0.2